Description

Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit album function.

Remediation

References

CVE-2024-48311

Related Vulnerabilities

WordPress Plugin WooCommerce-Store Exporter Multiple Cross-Site Scripting Vulnerabilities (1.7.5)

Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-55806)

EspoCRM Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2026-92298)

WordPress Plugin Esponce QR Code Generator Cross-Site Scripting (1.4)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1240)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2024-48311