| Package | Affected versions | Patched versions |
|---|---|---|
| piwigo | < 2.9.3 | 2.9.3 |
Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free