adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-11-03 07:22:22 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

minor XSS on admin/config/sizes #921

New Issue
Closed
opened 2026-10-05 00:23:52 +02:00 by adam · 0 comments
adam commented 2026-10-05 00:23:52 +02:00
Owner
Copy link
Copy source

on {original_resize_maxwidth, original_resize_maxheight, original_resize_quality} you can forge an HTTP request and add HTML/JS code in the value, which is displayed "as is" in the form.

This issue is minor because it requires admin access and the form is protected against CSRF attacks.

on `{original_resize_maxwidth, original_resize_maxheight, original_resize_quality}` you can forge an HTTP request and add HTML/JS code in the value, which is displayed "as is" in the form. This issue is minor because it requires admin access and the form is protected against CSRF attacks. <!-- github-sync-id:478998023 -->
adam closed this issue 2026-10-05 00:23:52 +02:00
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#921