Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jqpc-rhwf-xj5r

Опубликовано: 25 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access.

Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access.

EPSS

Процентиль: 50%
0.0027
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
почти 4 года назад

Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access.

CVSS3: 5.4
debian
почти 4 года назад

Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XS ...

EPSS

Процентиль: 50%
0.0027
Низкий

Дефекты

CWE-79