medium4.3
CVE-2020-9468
The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the…
Impact
The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the image_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Piwigo | Piwigo | Version 2.9.0 |