adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-30 21:52:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

stored XSS with pwg.images.setInfo #1014

New Issue
Closed
opened 2026-10-05 00:28:29 +02:00 by adam · 1 comment
adam commented 2026-10-05 00:28:29 +02:00
Owner
Copy link
Copy source

on file param. No worry with an admin, but this method can be used by a community user as well.

Originally reported by Zak S. see CVE-2020-9467

on `file` param. No worry with an admin, but this method can be used by a community user as well. Originally reported by Zak S. see CVE-2020-9467 <!-- github-sync-id:586943552 -->
adam closed this issue 2026-10-05 00:28:29 +02:00
adam commented 2026-10-05 00:28:30 +02:00
Author
Owner
Copy link
Copy source

This appears to have been assigned CVE: CVE-2020-9467

This appears to have been assigned CVE: [CVE-2020-9467](https://nvd.nist.gov/vuln/detail/CVE-2020-9467) <!-- github-comment-id:605401249 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#1014