Piwigo Security Vulnerabilities and Issues — Piwigo CVE List

Lucene search

PiwigoPiwigo

3 matches found

CVE•added 2020/03/26 8:15 p.m.•84 views

CVE-2020-9467

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

5.4CVSS5.1AI score0.0017EPSS

Web

CVE•added 2020/02/10 4:15 p.m.•57 views

CVE-2020-8089

Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page.

5.4CVSS5AI score0.00408EPSS

CVE•added 2020/03/26 8:15 p.m.•56 views

CVE-2020-9468

The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the image_id parameter.

4.3CVSS4.5AI score0.00224EPSS