Description Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page. Remediation References CVE-2020-8089 Related Vulnerabilities Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2002-2272) PostgreSQL Uncontrolled Search Path Element Vulnerability (CVE-2020-14349) WordPress Plugin eShop Multiple Vulnerabilities (6.3.14) OpenSSL Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-34183) WordPress Plugin Titan Framework Cross-Site Scripting (1.7.5) Severity Medium Classification CVE-2020-8089 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities