CVE-2022-24620

Publication date

2022-02-23 14:26:24

Family

mitre

State

PUBLISHED

Description

Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmasters cookies to get the webmasters access.