admin.php?page=accountbilling in Piwigo 2.9.5 has XSS via the vatnumber, billingname, company, or billingaddress parameter. This is exploitable via CSRF...
9.6CVSS5.8AI score0.01355EPSS
SaveExploits4References1
NVD•added 2019/09/13 1:15 p.m.•18 views
CVE-2019-13364
admin.php?page=accountbilling in Piwigo 2.9.5 has XSS via the vatnumber, billingname, company, or billingaddress parameter. This is exploitable via CSRF...
