CVE-2018-7722

MEDIUM 5.4CVE-2018-7722 · Published 06/03/2018 · updated 17/06/2026

In short

CVE-2018-7722 is a MEDIUM (CVSS 5.4) vulnerability affecting piwigo (piwigo).
Chance of exploitation in the next 30 days (EPSS): 0.54%, higher than 45.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
piwigo piwigo	`= 2.9.3`	No fix yet

Description

The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /ws.php?format=json request. CSRF exploitation, related to CVE-2017-10681, may be possible.

References

summ3rf/Vulner · Exploit

More vulnerabilities in piwigo

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

piwigo

= 2.9.3

No fix yet

More vulnerabilities in piwigo

See all →