CVE-2016-9751

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-9751

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9751.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-9751

Published

2016-12-01T11:59:10.103Z

Modified

2026-07-08T10:54:06.471954Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Cross-site scripting (XSS) vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

References

Affected packages

Git / github.com/piwigo/piwigo

Affected ranges

Type

GIT

Repo

https://github.com/piwigo/piwigo

Events

Introduced

bbae78ca3d0acea77de3f2dc1c3bfaece6cdeeb2

Last affected

bbae78ca3d0acea77de3f2dc1c3bfaece6cdeeb2

Database specific

{
    "extracted_events": [
        {
            "introduced": "2.8.3"
        },
        {
            "last_affected": "2.8.3"
        }
    ],
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:piwigo:piwigo:2.8.3:*:*:*:*:*:*:*"
}

Affected versions

2.*

2.8.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9751.json"