CVE-2021-40313

Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwgtoken in /admin/batchmanagerglobal.php...

PT-2021-22858

Name of the Vulnerable Software and Affected Versions Piwigo version 11.5 Description A SQL injection issue was found in Piwigo via the pwg token parameter in the "/admin/batch manager global.php" API endpoint. This allows for potential SQL injection attacks. Recommendations For Piwigo version...