Description

piwigo has XSS in password.php (incomplete fix for CVE-2012-4525)

Remediation

References

CVE-2012-4526

Related Vulnerabilities

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud SQL Injection (4.10.8)

WordPress Plugin Newsletters Multiple Vulnerabilities (4.6.14)

Drupal Core 8.9.x Cross-Site Request Forgery (8.9.0 - 8.9.18)

PleskWin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-0132)

WordPress Plugin JoomSport-for Sports: Team & League, Football, Hockey & more SQL Injection (3.3)

Severity

Medium

Classification

CVE-2012-4526 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities