CVE-2017-17826

The CVE-2017-17826 entry concerns Piwigo 2.9.2. The Configuration component is vulnerable to Persistent Cross‑Site Scripting via the gallery_title parameter in admin.php?page=configuration&section=main. An attacker can hijack a user’s browser and access data stored in it. The NVD description conf...