Description

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.

Remediation

References

CVE-2022-32297

Related Vulnerabilities

WordPress Plugin Symbiostock-Sell Photos Online For Free! Arbitrary File Upload (6.0.0)

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000863)

WordPress CVE-2011-3125 Vulnerability (CVE-2011-3125)

WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Local File Inclusion (1.3.6.2)

WordPress Plugin iThemes Exchange:Simple WP Ecommerce Cross-Site Scripting (1.11.18)

Severity

High

Classification

CVE-2022-32297 CWE-138 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities