Piwigo <= 15.6.0 Multiple Vulnerabilities

Piwigo is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if description...

CVE-2024-46605

Piwigo version v14.5.0 is susceptible to a cross-site scripting (XSS) vulnerability within the /admin.php?page=album component. The flaw occurs because the application fails to properly neutralize input, allowing an attacker to inject a crafted payload into the Description field. Successful explo...