CVE-2022-24620
Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmast...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com