Description
A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent.
Medium · 5.4
CVE-2022-48007
EUVD-2022-50721GHSA-xjw6-6j27-9w6v
A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts…
Published Jan 27, 2023 · Updated Mar 28, 2025 · Assigned by mitre