CVE-2023-51790

Published January 12th, 2024

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the lang parameter in the Admin Tools plug-in component.

Piwigo/Piwigo

Manage your photos with Piwigo, a full featured open source photo gallery application for the web. Star us on Github! More than 200 plugins and themes available. Join us and contribute!

GitHub

3.8K

Piwigo/AdminTools

Admin Tools adds a toolbar on the top of each page of your gallery with a set of useful functions.

GitHub