← All advisories

Medium severity6.1NVD Advisory· Published Feb 10, 2022· Updated Jun 17, 2026

CVE-2021-45357

CVE-2021-45357

Description

Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Piwigo/Piwigo3 versions
cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*range: >=12.0.0,<=12.1.0
- (no CPE)
- (no CPE)range: 12.x

Patches

Vulnerability mechanics

References

1

github.com/Piwigo/Piwigo/issues/1582nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.