High severity7.5NVD Advisory· Published Apr 26, 2021· Updated Jun 17, 2026

CVE-2021-31783

Description

show_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Piwigo/Localfiles Editor
cpe:2.3:a:piwigo:localfiles_editor:*:*:*:*:*:piwigo:*:*
Range: <11.4.0.1
Piwigo/LocalFilesEditor extensiondescription
Piwigo/Piwigollm-fuzzy
Range: <11.4.0.1

Patches

Vulnerability mechanics

References

github.com/Piwigo/LocalFilesEditor/commit/dda691d3e45bfd166ac175c70bd8b91cb4917b6bnvdPatchThird Party Advisory
github.com/Piwigo/LocalFilesEditor/issues/2nvdIssue TrackingThird Party Advisory
piwigo.org/ext/index.phpnvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000