Description
Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php.
Remediation
References
Related Vulnerabilities
Apache Tomcat Off-by-one Error Vulnerability (CVE-2023-28709)
Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9014)
WordPress Plugin Automattic Stats Referer Field HTML Injection (1.0)
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3722)
SharePoint Resource Management Errors Vulnerability (CVE-2015-0064)