Description SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages. Remediation References CVE-2021-27973 Related Vulnerabilities WordPress Plugin Password Protected Open Redirect (1.4) Joomla! Core SQL Injection (1.7.0 - 3.9.15) PHP Resource Management Errors Vulnerability (CVE-2012-0830) Oracle Database Server CVE-2012-3151 Vulnerability (CVE-2012-3151) osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43713) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-138 CVE-2021-27973