Piwigo v2.8.2 has XSS via the `tab`, `to`, `section`, `mode`, `installstatus`, and `display` parameters of the `admin.php` file.

Published Jan 14, 2018 · Updated Aug 5, 2024 · Assigned by mitre