← Database

CVE-2024-46606

MEDIUM CVSS: 5.4 Published: 2024-10-16 Modified: 2026-07-05

Description

A cross-site scripting (XSS) vulnerability in the component /admin.php?page=photo of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field.

Affected Platforms

Piwigo Piwigo

Weakness Type

CWE-79

References