3 matches found
CVE-2022-24620
Piwigo version 12.2.0 is vulnerable to stored cross-site scripting XSS, which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access...
5.4CVSS5.9AI score0.00545EPSS
SaveExploits1References2
Piwigo 跨站脚本漏洞
Piwigo is a set of Web-based open source image gallery software. Piwigo version 12.2.0 contains a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied and output data. An attacker could use this vulnerability to steal the webmaster's cookies to...
5.4CVSS5.2AI score0.00545EPSS
SaveExploits1References2
20