← All advisories

Medium severity6.1OSV Advisory· Published Feb 26, 2018· Updated Jun 17, 2026

CVE-2017-9425

CVE-2017-9425

Description

The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Pommes Frites/Piwigo FacetagOSV
Range: v0.0.1, v0.0.3
Piwigo/Piwigollm-fuzzy
Range: = 0.0.3

Patches

Vulnerability mechanics

References

3

www.exploit-db.com/exploits/42098/nvdExploitThird Party AdvisoryVDB Entry
www.youtube.com/watchnvdExploitThird Party Advisory
touhidshaikh.com/blog/poc/facetag-ext-piwigo-stored-xss/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.