VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 26, 2020· Updated Jun 17, 2026

CVE-2020-9468

CVE-2020-9468

Description

The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the image_id parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Piwigo/Piwigo2 versions
    cpe:2.3:a:piwigo:piwigo:2.9.0:e-beta:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:piwigo:piwigo:2.9.0:e-beta:*:*:*:*:*:*
    • (no CPE)range: = 2.9.e-beta
  • Piwigo/Community plugindescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.