adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-30 21:52:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

HTML Injection in Meta description tag in version 12.2.0 #1425

New Issue
Open
opened 2026-10-05 00:43:22 +02:00 by adam · 0 comments
adam commented 2026-10-05 00:43:22 +02:00
Owner
Copy link
Copy source

Hi,

Description

Album category name reflects in <title> and the <meta> tag, Meta content can be manipulated with the album category name, Follow up the step to reproduce for more.

Step to reproduce

  1. Log in as Admin
  2. Navigate to http://10.xx.xx.xx/piwigo/admin.php?page=cat_list
  3. Click Add Album and input album name 2" http-equiv="refresh"> click on create button.
  4. Then click Visit The Gallery
  5. It will take to the album category page
  6. Every 2 seconds it will be refreshed because of this HTML Injection.

Possible area for this injection

https://github.com/Piwigo/Piwigo/blob/1fce0f7c97d2f10f4b78798266e0db60e5e9e999/themes/default/template/header.tpl#L17-L21

Attachment

album
category html
source code

Hi, ## Description Album category name reflects in `<title>` and the `<meta>` tag, Meta content can be manipulated with the album category name, Follow up the step to reproduce for more. ## Step to reproduce 1. Log in as Admin 2. Navigate to [http://10.xx.xx.xx/piwigo/admin.php?page=cat_list](http://10.xx.xx.xx/piwigo/admin.php?page=cat_list) 3. Click `Add Album` and input album name `2" http-equiv="refresh">` click on create button. 4. Then click [Visit The Gallery](http://10.xx.xx.xx/piwigo/index.php?/category/10) 5. It will take to the album category page 6. Every 2 seconds it will be refreshed because of this HTML Injection. ## Possible area for this injection https://github.com/Piwigo/Piwigo/blob/1fce0f7c97d2f10f4b78798266e0db60e5e9e999/themes/default/template/header.tpl#L17-L21 ## Attachment ![album](https://i.imgur.com/eSQ9uyY.png) ![category html](https://i.imgur.com/dFhpA1U.png) ![source code](https://i.imgur.com/WMQGGtS.png) <!-- github-sync-id:1167220782 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#1425