Vulnerability Details CVE-2021-40678
                In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.002
                        
                    
                    
                        
                            EPSS Ranking 40.2%
                        
                    
                 
                
                    CVSS Severity
                    
                        
                            CVSS v3 Score 5.4
                        
                    
                    
                        
                            CVSS v2 Score 3.5
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2021-40678
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:piwigo:piwigo:11.5.0