GCVE - cpe:2.3:a:piwigo:piwigo:2.10.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:piwigo:piwigo:2.10.1:*:*:*:*:*:*:*

part: a version: 2.10.1 update: *

Vendor	Piwigo (`435f9601-9f57-5ff8-bd2f-46b9e78f04e6`)
Product	Piwigo (`d2517e6f-173e-5046-84cf-86cc698c9439`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/piwigo/piwigo`	purl2cpe	2026-06-01 10:16:53.514963
`pkg:pypi/piwigo`	purl2cpe	2026-06-01 10:16:53.514964

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-9467`	vulnerable	2026-06-08 05:28:01.787689	Details available Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function. Published: 2020-03-26T19:09:27.000Z Updated: 2024-08-04T10:26:16.384Z Open on db.gcve.eu Reference links https://github.com/Piwigo/Piwigo/issues/1168 http://packetstormsecurity.com/files/159191/Piwigo-2.10.1-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8089`	vulnerable	2026-06-08 05:27:14.790875	Details available Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page. Published: 2020-02-10T15:12:30.000Z Updated: 2024-08-04T09:48:25.487Z Open on db.gcve.eu Reference links https://piwigo.org/forum/viewforum.php?id=23 https://github.com/Piwigo/Piwigo/issues/1150	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-22150`	vulnerable	2026-06-08 05:22:31.281284	Details available A cross site scripting (XSS) vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML. Published: 2021-07-21T16:07:38.000Z Updated: 2024-08-04T14:51:10.386Z Open on db.gcve.eu Reference links https://github.com/Piwigo/Piwigo/issues/1158	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-22148`	vulnerable	2026-06-08 05:22:31.280707	Details available A stored cross site scripting (XSS) vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML. Published: 2021-07-21T16:07:36.000Z Updated: 2024-08-04T14:51:10.571Z Open on db.gcve.eu Reference links https://github.com/Piwigo/Piwigo/issues/1157	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.