Description
Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to unlock albums via a crafted request.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Landing Pages Cross-Site Scripting (2.2.4)
WordPress Plugin ARMember-Content Restriction & Membership Security Bypass (1.4)
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3319)
WordPress Plugin Filter Custom Fields & Taxonomies Light Unspecified Vulnerability (1.04)
Roundcube Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4076)