CVE-2014-8945

CRITICAL 9.8CVE-2014-8945 · Published 01/06/2020 · updated 17/06/2026

In short

CVE-2014-8945 is a CRITICAL (CVSS 9.8) vulnerability affecting lexiglot (piwigo).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
lexiglot piwigo	`≤ 2014-11-20`	No fix yet

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.