Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function.
CVSS Score
4.3
EPSS Score
0.003
Published
2023-06-15
Piwigo 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the "add tags" function.
CVSS Score
4.3
EPSS Score
0.002
Published
2023-05-23
Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.
CVSS Score
9.8
EPSS Score
0.004
Published
2023-05-23
Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.
CVSS Score
9.8
EPSS Score
0.004
Published
2023-05-23
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-05-17
SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint.
CVSS Score
8.8
EPSS Score
0.372
Published
2023-04-21
A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent.
CVSS Score
5.4
EPSS Score
0.002
Published
2023-01-27
Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via /search/1940/created-monthly-list.
CVSS Score
6.1
EPSS Score
0.003
Published
2022-08-31
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-07-14
piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.
CVSS Score
8.8
EPSS Score
0.031
Published
2022-06-28