PT-2024-22505 · Piwigo · Piwigo
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Piwigo versions prior to 14.3.0
Description
A Cross Site Scripting issue exists due to missing sanitization in the
create tag function in admin/include/functions.php.Recommendations
For versions prior to 14.3.0, update to version 14.3.0 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
create tag function in admin/include/functions.php until a patch is available.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Piwigo