What’s Vulnerable › Vulnerabilities

CVE-2018-5692

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-01-14 · updated 2026-06-17
• Weakness: CWE-79

Description

Piwigo v2.8.2 has XSS via the `tab`, `to`, `section`, `mode`, `installstatus`, and `display` parameters of the `admin.php` file.

Affected products

• Piwigo: 2.8.2

References

• https://www.vulnerability-lab.com/get_content.php?id=2005
• https://www.vulnerability-lab.com/get_content.php?id=2005

Get alerted when CVE-2018-5692 or the next vulnerability affects your stack