Medium severity4.8NVD Advisory· Published Jun 6, 2017· Updated May 13, 2026
CVE-2017-9452
CVE-2017-9452
Description
Cross-site scripting (XSS) vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/Piwigo/Piwigo/issues/667nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.