CVE-2017-9452: XSS
Published Jun 6, 2017
·Updated
Cross-site scripting (XSS) vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Affected Software
1 affected component
Piwigo piwigo<=2.9.0
Event History
Jun 6, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9452?
CVE-2017-9452 has a moderate severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2017-9452?
To fix CVE-2017-9452, you should upgrade Piwigo to version 2.9.1 or later.
3
What is CVE-2017-9452 related to?
CVE-2017-9452 is related to a cross-site scripting vulnerability in the admin.php file of Piwigo.
4
Who is affected by CVE-2017-9452?
Users of Piwigo versions 2.9.0 and earlier are affected by CVE-2017-9452.
5
Can CVE-2017-9452 be exploited remotely?
Yes, CVE-2017-9452 can be exploited remotely by attackers to inject arbitrary web scripts.