Description
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit.
Remediation
References
Related Vulnerabilities
Joomla Improper Authentication Vulnerability (CVE-2022-23795)
OpenVPN AS Use After Free Vulnerability (CVE-2023-46850)
phpMyFAQ Other Vulnerability (CVE-2006-6913)
WordPress Plugin WP Coder-add custom html, css and js code Cross-Site Request Forgery (2.5.1)
phpMyFAQ Weak Password Requirements Vulnerability (CVE-2023-0307)