A stored cross-site scripting (XSS) vulnerability in the Configuration page of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://github.com/Piwigo/Piwigo/issues/2261 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
22 May 2025, 17:28
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-11-20 21:15
Updated : 2025-05-22 17:28
NVD link : CVE-2024-52701
Mitre link : CVE-2024-52701
JSON object : View
Products Affected
piwigo
- piwigo
CWE
No CWE.