CVE-2024-28662: XSS
A Cross Site Scripting vulnerability exists in Piwigo before 14.3.0 script because of missing sanitization in createtag in admin/include/functions.php.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28662?
CVE-2024-28662 is classified as a Cross Site Scripting (XSS) vulnerability with a medium severity due to its potential to exploit user interactions.
How do I fix CVE-2024-28662?
To remediate CVE-2024-28662, upgrade Piwigo to version 14.3.0 or later where the vulnerability has been patched.
What software is affected by CVE-2024-28662?
CVE-2024-28662 affects Piwigo versions prior to 14.3.0 due to insufficient sanitization in the create_tag function.
What are the consequences of CVE-2024-28662?
Exploitation of CVE-2024-28662 can lead to unauthorized JavaScript execution in users' browsers, potentially allowing attackers to hijack sessions or manipulate content.
How does CVE-2024-28662 affect web application security?
CVE-2024-28662 highlights the importance of proper input sanitization in web applications to prevent XSS attacks, which can compromise user data and trust.