Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Piwigo 跨站脚本漏洞
Vulnerability Description
Piwigo是一套基于Web的开源图片库软件。该软件包括图片管理、图片分类和权限管理等功能。 Piwigo v13.4.0版本存在安全漏洞，该漏洞源于其identification.php组件对User-Agent的操作允许攻击者注入精心制作的有效载荷实现存储型跨站脚本导致执行任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A