CVE-2018-5692: Improper Neutralization of Input During Web Page Generation

Piwigo v2.8.2 has XSS via the tab, to, section, mode, installstatus, and display parameters of the admin.php file...