Description
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) login and (2) mail_address parameters.
Remediation
References
Related Vulnerabilities
MySQL CVE-2016-5624 Vulnerability (CVE-2016-5624)
Internet Information Services Other Vulnerability (CVE-1999-0191)
Oracle HTTP Server Other Vulnerability (CVE-2004-2115)
WordPress Plugin Import and export users and customers Cross-Site Scripting (1.14.1.2)
WordPress Plugin Email Verification for WooCommerce Unspecified Vulnerability (1.8.1)