CVE-2022-24620

Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation

published February 23, 2022

CVSS
—
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00545 · 44.9th percentile
Published
2022-02-23T14:26Z
EPSS history
Timeline
  • 23 FEB 14:26Z
    Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation
    cvelistv5