Description
Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access.
Unscored
CVE-2022-24620
EUVD-2022-29496GHSA-jqpc-rhwf-xj5r
Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can st…
Published Feb 23, 2022 · Updated Aug 3, 2024 · Assigned by mitre