Description
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page.
Remediation
References
Related Vulnerabilities
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-20920)
WebLogic CVE-2020-2829 Vulnerability (CVE-2020-2829)
WordPress Plugin Child Theme Creator by Orbisius Arbitrary File Modification (1.2.6)
WebLogic Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-17195)
WordPress Plugin Mass Delete Taxonomies Cross-Site Request Forgery (3.0.0)