Description Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function. Remediation References CVE-2022-32297 Related Vulnerabilities TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21910) WordPress Plugin WP ULike Cross-Site Scripting (3.1) Ruby on Rails Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-22885) PHP Use of Externally-Controlled Format String Vulnerability (CVE-2006-0200) WordPress Plugin Facebook Like Box Cross-Site Request Forgery (2.8.2) Severity High Classification CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-138 CVE-2022-32297