Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-52701 EUVD-2024-46032GHSA-48wm-4cr2-qrfh

A stored cross-site scripting (XSS) vulnerability in the Configuration page of Piwigo v14.5.0 allows attackers to execute arbitrary web scr…

Published Nov 20, 2024 · Updated Nov 20, 2024 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in the Configuration page of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter.

References