← Database

CVE-2022-24620

MEDIUM CVSS: 5.4 Published: 2022-02-24 Modified: 2026-06-17

Description

Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access.

Affected Platforms

Piwigo Piwigo

Weakness Type

CWE-79

References