https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T01:48:37.392528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-97998 EUVD-2026-97998 2026-10-15T01:48:37.405447+00:00 EUVD-2026-97998 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1980 fkie_cve-2014-1980 2026-10-15T01:48:37.405482+00:00

Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin.

 https://cve.radiocsirt.org/vuln/ghsa-xfhj-62hp-rv2f GHSA-xfhj-62hp-rv2f 2026-10-15T01:48:37.405512+00:00

Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin.

 https://cve.radiocsirt.org/vuln/gsd-2014-1980 gsd-2014-1980 2026-10-15T01:48:37.405529+00:00 gsd-2014-1980 https://cve.radiocsirt.org/vuln/jvndb-2014-000092 jvndb-2014-000092 2026-10-15T01:48:37.405540+00:00

Piwigo is a software to manage and host image files on the web. Piwigo contains a cross-site scripting vulnerability when the "Community" plugin is activated and validation on user uploaded photos is disabled. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.