Description

Cross-site scripting (XSS) vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename.

Remediation

References

CVE-2017-5608

Related Vulnerabilities

Claroline Other Vulnerability (CVE-2006-1596)

MODX Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-7324)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3966)

e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-16388)

WordPress Plugin Best Image Gallery & Responsive Photo Gallery-FooGallery Cross-Site Scripting (1.4.31)

Severity

Medium

Classification

CVE-2017-5608 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities