CVE-2021-45357: XSS
First published: Thu Feb 10 2022(Updated: )
Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Piwigo Piwigo | >=12.0.0<=12.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2021-45357.
What is the affected software?
The affected software is Piwigo version 12.x.
What is the severity of CVE-2021-45357?
The severity of CVE-2021-45357 is medium.
How does the Cross-Site Scripting (XSS) vulnerability in Piwigo 12.x occur?
The Cross-Site Scripting (XSS) vulnerability occurs via the pwg_activity function in include/functions.inc.php.
Is there a fix available for this vulnerability?
Yes, a fix for this vulnerability is available. Update Piwigo to version 12.1.1 or later.
- collector/nvd-index
- vendor/piwigo
- canonical/piwigo piwigo
- version/piwigo piwigo/12.0.0
- version/piwigo piwigo/12.1.0