Piwigo 11.4.0 allows admin/user_list_backend.php order[0][dir] SQL Injection.
Published May 13, 2021.
Piwigo Piwigo