Piwigo cross-site scripting vulnerability (CNVD-2018-06555)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site scripting vulnerability exists in the admin panel in Piwigo version 2.9.3. A remote attacker can exploit th...

PT-2018-18237

The management panel in Piwigo 2.9.3 has stored XSS via the virtual name parameter in a /admin.php?page=cat list request, a different issue than CVE-2017-9836. CSRF exploitation, related to CVE-2017-10681, may be possible...

Piwigo 'virtual_name' parameter cross-site scripting vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A cross-site scripting vulnerability exists in Piwigo version 2.9.1. A remote attacker can exploit this vulnerability by...

PT-2017-19208

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.1 Description A cross-site scripting XSS issue allows remote authenticated administrators to inject arbitrary web script or HTML via the virtual name parameter to "/admin.php" when creating a virtual album. Recommendations F...