Description
Cross-site scripting (XSS) vulnerability in Piwigo 2.9.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the virtual_name parameter to /admin.php (i.e., creating a virtual album).
Unscored
CVE-2017-9836
EUVD-2017-18750GHSA-97w8-g9g5-4xf9
Cross-site scripting (XSS) vulnerability in Piwigo 2.9.1 allows remote authenticated administrators to inject arbitrary web script or HTML …
Published Jun 24, 2017 · Updated Sep 16, 2024 · Assigned by mitre