Vulnerability Description
Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php.
CVSS Score
6.1
MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Piwigo | Piwigo | <= 2.8.2 |
Related Weaknesses (CWE)
References
- http://piwigo.org/releases/2.8.3Release NotesVendor Advisory
- https://github.com/Piwigo/Piwigo/commit/9a93d1f44b06605af84520509e7a0e8b64ab0c05PatchThird Party Advisory
- https://github.com/Piwigo/Piwigo/issues/548Issue TrackingThird Party Advisory
- http://piwigo.org/releases/2.8.3Release NotesVendor Advisory
- https://github.com/Piwigo/Piwigo/commit/9a93d1f44b06605af84520509e7a0e8b64ab0c05PatchThird Party Advisory
- https://github.com/Piwigo/Piwigo/issues/548Issue TrackingThird Party Advisory
FAQ
What is CVE-2016-10513?
CVE-2016-10513 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php.
How severe is CVE-2016-10513?
CVE-2016-10513 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-10513?
Check the references section above for vendor advisories and patch information. Affected products include: Piwigo Piwigo.