Description
Piwigo v2.8.2 has XSS via the `tab`, `to`, `section`, `mode`, `installstatus`, and `display` parameters of the `admin.php` file.
Remediation
References
Related Vulnerabilities
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.5.18.727)
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.25)
WordPress Plugin Exit Popups & Onsite Retargeting by OptiMonk Cross-Site Scripting (1.2.5)
Apache HTTP Server Other Vulnerability (CVE-2007-1862)
WordPress 4.4.x Cross-Domain Flash Injection Vulnerability (4.4 - 4.4.13)