Description Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php. Remediation References CVE-2022-26266 Related Vulnerabilities SugarCRM Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2019-17317) ZenCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2005-3996) WordPress Plugin Google Map Remote Code Execution (1.0) Oracle JRE CVE-2013-5850 Vulnerability (CVE-2013-5850) WordPress Plugin WordPress Gallery MaxGalleria Unspecified Vulnerability (6.0.8) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-138 CVE-2022-26266