CVE-2020-9467

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function

published March 26, 2020

CVSS
—
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23822 · 97.8th percentile
Published
2020-03-26T19:09Z
EPSS history
Timeline
  • 26 MAR 19:09Z
    Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function
    cvelistv5