Description
Cross-site scripting (XSS) vulnerability in admin/picture_modify.php in the photo-edit subsystem in Piwigo 2.6.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the associate[] field, a different vulnerability than CVE-2014-4649.
Remediation
References
Related Vulnerabilities
phpMyAdmin Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-1000017)
WordPress Plugin Media Library Assistant SQL Injection (3.05)
WordPress Plugin Related Sites 'guid' Parameter SQL Injection (2.1)
Drupal Core 6.x Information Disclosure (6.0 - 6.30)
Atlassian Jira Improper Authentication Vulnerability (CVE-2021-43950)