https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 01:44:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-97998 EUVD-2026-97998 https://cve.radiocsirt.org/vuln/euvd-2026-97998 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1980 <p>Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin.</p> <p>Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-1980 https://cve.radiocsirt.org/vuln/ghsa-xfhj-62hp-rv2f <p>Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin.</p> <p>Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin.</p> https://cve.radiocsirt.org/vuln/ghsa-xfhj-62hp-rv2f https://cve.radiocsirt.org/vuln/gsd-2014-1980 gsd-2014-1980 https://cve.radiocsirt.org/vuln/gsd-2014-1980 https://cve.radiocsirt.org/vuln/jvndb-2014-000092 <p>Piwigo is a software to manage and host image files on the web. Piwigo contains a cross-site scripting vulnerability when the &#34;Community&#34; plugin is activated and validation on user uploaded photos is disabled. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Piwigo is a software to manage and host image files on the web. Piwigo contains a cross-site scripting vulnerability when the &#34;Community&#34; plugin is activated and validation on user uploaded photos is disabled. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2014-000092