EUVD-2021-28037

Malicious code in bioql PyPI...

Piwigo cross-site scripting vulnerabilities

Piwigo is a set of Web-based open source image library software. Piwigo has a cross-site scripting vulnerability in version 11.5.0, which stems from a lack of user-supplied data and output data validation filtering. An attacker could exploit this vulnerability to conduct XSS attacks via the syste...

CVE-2021-40882: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...

PT-2021-23000

Name of the Vulnerable Software and Affected Versions Piwigo version 11.5.0 Description A Cross Site Scripting XSS issue exists via the system album name and description of the location. Recommendations For Piwigo version 11.5.0, consider restricting access to the system album name and descriptio...