EDB-48814

PoC

Piwigo 2.10.1 - Cross Site Scripting

view exploit source exploit_dbtype webappsauthor Iridiumpublished 2020-09-16catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-9467US	medium5.4	23.8% (98th)	Exploit	2020-03-26
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.