CVE-2012-4526: Piwigo

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

piwigo has XSS in password.php (incomplete fix for CVE-2012-4525)

Affected products

• Piwigo Piwigo: from 2.4.0, up to and including 2.4.3; version 2.3.1 only

Published 2019-12-02. Last modified 2026-06-16.