Description
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit.
Remediation
References
Related Vulnerabilities
VirtueMart access control bypass
Python CVE-2019-9636 Vulnerability (CVE-2019-9636)
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.5)
WordPress Plugin All-in-One Event Calendar Multiple Cross-Site Scripting Vulnerabilities (1.5)
WordPress Plugin Timetable and Event Schedule by MotoPress Information Disclosure (2.3.19)