Description
A cross site scripting (XSS) vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML.
Remediation
References
Related Vulnerabilities
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3369)
WordPress Plugin MX Time Zone Clocks Cross-Site Scripting (3.4)
WordPress Plugin Advanced Dynamic Pricing for WooCommerce Multiple Vulnerabilities (4.1.5)
Piwigo Use of Insufficiently Random Values Vulnerability (CVE-2024-48928)
WordPress Plugin Limit Login Attempts Reloaded Security Bypass (2.17.3)