PT-2023-20837 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 13.5.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the filter user id parameter to the "admin.php?page=history&filter image id=&filter user id" endpoint. Recommendations:...