Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-05-26
A Cross Site Scripting (XSS) vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location.
CVSS Score
6.1
EPSS Score
0.003
Published
2021-12-14
Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token in /admin/batch_manager_global.php.
CVSS Score
8.8
EPSS Score
0.003
Published
2021-12-06
Page 2