Piwigo v2.8.2 has XSS via the tab, to, section, mode, installstatus, and display parameters of the admin.php file.
tab
to
section
mode
installstatus
display
admin.php
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5692.json"