Piwigo <= 15.6.0 Multiple Vulnerabilities

Piwigo is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if description...

CVE-2024-46605

CVE-2024-46605 is a documented XSS in Piwigo 14.5.0, affecting the admin area via /admin.php?page=album where a crafted payload in the Description field can execute arbitrary script/HTML. The CVE entry and multiple connected sources corroborate the impact as a client-side script injection with lo...