Piwigo

Records121All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical16CVSS 9.0–10.0

CVSS high42CVSS 7.0–8.9

Exploited now

Piwigo records in CISA KEV

No Piwigo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Piwigo 103 records HIGH Lexiglot 9 records MEDIUM Guestbook 1 record MEDIUM Localfiles Editor 1 record LOW

Records

1 record in Localfiles Editor · all components

TI-2021-11785 CVE-2021-31783 · GHSA-35gm-xggq-mjxq

show_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows…

LOW 34

show_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0062 Published 2021-04-26 No fix listed CWE-345

Open these records in search →

Critical	16
High	42
Medium	62
Low	1
No CVSS	0