Known vulnerabilities in Piwigo - page 2

Vendor: Piwigo.org
Software: Piwigo
Software CPE: cpe:2.3:a:piwigo_org:piwigo:*:*:*:*:*:*:*:*
Total vulnerabilities: 60
Public exploits: 15
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Piwigo Piwigo is affected by 60 known vulnerabilities: 13 high, 18 medium, 29 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75523 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-26876
CWE-89 High
Available
No
13.6.0 26.04.2023 SB2023042631
#VU53327 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-32615
CWE-89 High
No
No
11.5.0 18.05.2021 SB2021051804
#VU26509 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8089
CWE-79 Low
No
No
2.10.2 01.04.2020 SB2020040135
#VU26508 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9467
CWE-79 Low
Available
No
2.10.2 01.04.2020 SB2020040135
#VU34602 - Improper input validation
CVE-2020-9468
CWE-20 Low
No
No
- 26.03.2020 SB2020032659
#VU35012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4525
CWE-79 Low
No
No
- 02.12.2019 SB2019120222
#VU35013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4526
CWE-79 Low
No
No
- 02.12.2019 SB2019120222
#VU35493 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13363
CWE-79 Low
No
No
- 13.09.2019 SB2019091318
#VU35494 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13364
CWE-79 Low
No
No
- 13.09.2019 SB2019091318
#VU31344 - Cross-Site Request Forgery (CSRF)
CVE-2014-4613
CWE-352 Medium
Available
No
2.6.2 16.03.2018 SB2018031617
#VU37477 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-7722
CWE-79 Low
No
No
- 06.03.2018 SB2018030625
#VU37478 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-7723
CWE-79 Low
No
No
- 06.03.2018 SB2018030625
#VU37479 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-7724
CWE-79 Low
No
No
- 06.03.2018 SB2018030625
#VU31348 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-6883
CWE-89 High
No
No
2.9.3 24.02.2018 SB2018022403
#VU37638 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5692
CWE-79 Low
No
No
- 14.01.2018 SB2018011404
#VU37744 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-17825
CWE-79 Low
No
No
- 21.12.2017 SB2017122014
#VU37745 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-17826
CWE-79 Low
No
No
- 21.12.2017 SB2017122014
#VU37746 - Cross-Site Request Forgery (CSRF)
CVE-2017-17827
CWE-352 High
No
No
- 21.12.2017 SB2017122014
#VU37748 - Cross-Site Request Forgery (CSRF)
CVE-2017-17774
CWE-352 High
No
No
- 20.12.2017 SB2017122014
#VU37749 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-17775
CWE-79 Low
No
No
- 20.12.2017 SB2017122014


Showing elements 21 - 40 out of 60