CVE-2024-28662

creationtimestamp| type| source ---|---|--- 2024-03-13 22:26:53+00:00| seen| https://t.me/ctinow/207230 2024-03-13 22:31:52+00:00| seen| https://t.me/ctinow/207248...

CVE-2024-28662

CVE-2024-28662 affects Piwigo prior to 14.3.0, with a Cross-Site Scripting (XSS) vulnerability caused by missing sanitization in the function that handles tagging (admin/include/functions.php: create_tag). Exploitation details are not provided in the documents, but the issue is clearly linked to ...