← Database

CVE-2021-43675

MEDIUM CVSS: 6.1 Published: 2021-12-15 Modified: 2026-06-17

Description

Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest.php. The function exit will terminate the script and print the message to the user. The message will contain albumID which is controlled by the user.

Affected Platforms

Lycheeorg Lychee

Weakness Type

CWE-79

References