Description admin/configuration.php in Piwigo 2.9.2 has CSRF. Remediation References CVE-2017-17774 Related Vulnerabilities WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (4.4.3) WordPress Plugin Youzify-BuddyPress Community, User Profile, Social Network & Membership for WordPress Cross-Site Scripting (1.2.1) WordPress Plugin Word of the day Arbitrary File Upload (1.0) WordPress Plugin Simple Image Gallery Cross-Site Scripting (1.0.6) Oracle JRE CVE-2020-2805 Vulnerability (CVE-2020-2805) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2017-17774