Description

Cross-site scripting (XSS) vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter to admin.php.

Remediation

References

CVE-2015-2034

Related Vulnerabilities

WebLogic CVE-2024-20927 Vulnerability (CVE-2024-20927)

WordPress Plugin Classified Listing Store & Membership Cross-Site Scripting (1.4.19)

OpenSSL Out-of-bounds Read Vulnerability (CVE-2023-1255)

MongoDb CVE-2024-6384 Vulnerability (CVE-2024-6384)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-2666)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-2034