CVE-2020-22148: XSS
Published Jul 21, 2021
·Updated
A stored cross site scripting (XSS) vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML.
Affected Software
1 affected component
Piwigo piwigo=2.10.1
Event History
Jul 21, 2021
CVE Published
via MITRE·04:07 PM
Data Sourced
via MITRE·04:07 PM
Description
Frequently Asked Questions
1
What is CVE-2020-22148?
CVE-2020-22148 is a stored cross site scripting (XSS) vulnerability in Piwigo 2.10.1.
2
How does CVE-2020-22148 affect Piwigo?
CVE-2020-22148 allows attackers to execute arbitrary web scripts or HTML in Piwigo 2.10.1.
3
What is the severity level of CVE-2020-22148?
CVE-2020-22148 has a severity level of medium.
4
How can I fix CVE-2020-22148?
To fix CVE-2020-22148, upgrade to a version of Piwigo that is not affected by the vulnerability.
5
Is there any further information available about CVE-2020-22148?
Yes, you can find more information about CVE-2020-22148 at the following link: [GitHub Issue](https://github.com/Piwigo/Piwigo/issues/1157).