Description

Cross-site scripting (XSS) vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter to admin.php.

Remediation

References

CVE-2015-2034

Related Vulnerabilities

Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-0217)

WordPress Plugin CSV Import Cross-Site Scripting (1.0)

Oracle Application Server CVE-2006-0285 Vulnerability (CVE-2006-0285)

Atlassian Jira CVE-2019-8448 Vulnerability (CVE-2019-8448)

WordPress Plugin WP Sitemap Page Cross-Site Scripting (1.6.4)

Severity

Medium

Classification

CVE-2015-2034 CWE-707

Tags

Missing Update Known Vulnerabilities