high8.8
CVE-2021-40313
Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token in /admin/batch_manager_global.php.
Impact
Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token in /admin/batch_manager_global.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Piwigo | Piwigo | Version 11.5.0 |