Facetag Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Facetag Project records in CISA KEV

No Facetag Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2017-06838 CVE-2017-9426 · GHSA-gpwc-jxgg-v99j

MEDIUM 47

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02668 Published 2018-02-26 No fix listed CWE-89

TI-2017-06837 CVE-2017-9425 · GHSA-7g99-j2h6-cvr3

LOW 30

The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01353 Published 2018-02-26 No fix listed CWE-79