Description Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit album function. Remediation References CVE-2024-48311 Related Vulnerabilities MySQL CVE-2015-0508 Vulnerability (CVE-2015-0508) WordPress Plugin CWIS-Antivirus Security Scanner Unspecified Vulnerability (2.3.2) WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Cross-Site Scripting (1.7.0.10) PHP Use After Free Vulnerability (CVE-2016-4473) WordPress Plugin Schema App Structured Data Unspecified Vulnerability (0.5.4) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2024-48311