An authenticated cross-site scripting (XSS) vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/whiteshark2k/Piwigo-XSS/blob/main/Piwigo-XSS.md | Exploit Third Party Advisory |
Configurations
History
27 May 2025, 19:12
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:piwigo:piwigo:14.5.0:*:*:*:*:*:*:* | |
| References | () https://github.com/whiteshark2k/Piwigo-XSS/blob/main/Piwigo-XSS.md - Exploit, Third Party Advisory | |
| First Time |
Piwigo piwigo
Piwigo |
27 Sep 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-27 15:15
Updated : 2025-05-27 19:12
NVD link : CVE-2024-46333
Mitre link : CVE-2024-46333
JSON object : View
Products Affected
piwigo
- piwigo
CWE
No CWE.