Description
The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action.
Unscored
CVE-2017-9425
EUVD-2017-18360GHSA-7g99-j2h6-cvr3
The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action.
Published Feb 26, 2018 · Updated Aug 5, 2024 · Assigned by mitre