CVE-2012-2209: XSS
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter in the configuration module, (2) installstatus parameter in the languagesnew module, or (3) theme parameter in the theme module.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2209?
CVE-2012-2209 is classified as a medium-severity vulnerability due to its potential impact on user data through cross-site scripting attacks.
How do I fix CVE-2012-2209?
To fix CVE-2012-2209, upgrade Piwigo to version 2.3.4 or later, which addresses the identified XSS vulnerabilities.
What are the affected versions of Piwigo for CVE-2012-2209?
CVE-2012-2209 affects all versions of Piwigo prior to 2.3.4.
What type of attacks can CVE-2012-2209 facilitate?
CVE-2012-2209 can facilitate cross-site scripting (XSS) attacks, allowing remote attackers to inject malicious scripts.
Which parameters are vulnerable in CVE-2012-2209?
The parameters vulnerable in CVE-2012-2209 include section, installstatus, and theme within the administration interface.