Description Lack of output escaping leads to a XSS vector in the multilingual associations component. Remediation References CVE-2026-21631 Related Vulnerabilities Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-43018) MySQL CVE-2017-3309 Vulnerability (CVE-2017-3309) Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-17567) MySQL CVE-2014-2432 Vulnerability (CVE-2014-2432) IBM WebSEAL CVE-2019-4145 Vulnerability (CVE-2019-4145) Severity Medium Classification CVE-2026-21631 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities