CVE-2024-28662

creationtimestamp| type| source ---|---|--- 2024-03-13 22:26:53+00:00| seen| https://t.me/ctinow/207230 2024-03-13 22:31:52+00:00| seen| https://t.me/ctinow/207248...

CVE-2024-28662

A Cross Site Scripting (XSS) vulnerability exists in Piwigo versions prior to 14.3.0 . The root cause is a lack of input sanitization in the create_tag function located within admin/include/functions.php. This flaw allows for the injection of malicious scripts during web page generation. To remed...