use xss+csrf attack on configuration pages #742

Closed
opened 2026-10-05 00:15:08 +02:00 by adam · 2 comments
Owner

Edit we did see your email and we are currently discussing privately of the issue. No need to publish that. Thank you for reporting

Edit we did see your email and we are currently discussing privately of the issue. No need to publish that. Thank you for reporting <!-- github-sync-id:282706536 -->
adam closed this issue 2026-10-05 00:15:08 +02:00
Author
Owner

Well, sir, I just see your close notification on the github:

https://github.com/Piwigo/Piwigo/issues/822
https://github.com/Piwigo/Piwigo/issues/822

Ummm, now how do you think about this vulnerability,sir?

I think it's need to be fixed in the future, even if not in recent days
,isn't it?

2017-12-18 1:34 GMT+08:00 flop25 notifications@github.com:

Closed #822 https://github.com/Piwigo/Piwigo/issues/822.

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/Piwigo/Piwigo/issues/822#event-1391147403, or mute
the thread
https://github.com/notifications/unsubscribe-auth/AFtxWHnQVOAlf2DwNq75mBiF-EN0PpkTks5tBVC_gaJpZM4REtxz
.

Well, sir, I just see your close notification on the github: *https://github.com/Piwigo/Piwigo/issues/822 <https://github.com/Piwigo/Piwigo/issues/822>* Ummm, now how do you think about this vulnerability,sir? I think it's need to be fixed in the future, even if not in recent days ,isn't it? 2017-12-18 1:34 GMT+08:00 flop25 <notifications@github.com>: > Closed #822 <https://github.com/Piwigo/Piwigo/issues/822>. > > — > You are receiving this because you authored the thread. > Reply to this email directly, view it on GitHub > <https://github.com/Piwigo/Piwigo/issues/822#event-1391147403>, or mute > the thread > <https://github.com/notifications/unsubscribe-auth/AFtxWHnQVOAlf2DwNq75mBiF-EN0PpkTks5tBVC_gaJpZM4REtxz> > . > <!-- github-comment-id:352324526 -->
Author
Owner

I'm working on it.

I'm working on it. <!-- github-comment-id:352365034 -->
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#742