Approved changes feed: RSS · Atom

cpe:2.3:a:piwigo:piwigo:14.2.0:*:*:*:*:*:*:*

part: a version: 14.2.0 update: *

VendorPiwigo (435f9601-9f57-5ff8-bd2f-46b9e78f04e6)
ProductPiwigo (d2517e6f-173e-5046-84cf-86cc698c9439)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/piwigo/piwigo purl2cpe 2026-06-01 10:16:53.514734
pkg:pypi/piwigo purl2cpe 2026-06-01 10:16:53.514735

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28662 vulnerable 2026-06-08 06:33:27.094367 Details available
A Cross Site Scripting vulnerability exists in Piwigo before 14.3.0 script because of missing sanitization in create_tag in admin/include/functions.php.
Published: 2024-03-13T00:00:00.000Z
Updated: 2024-11-13T16:08:01.089Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.