CVE-2020-19212: Piwigo

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete.

Affected products

• Piwigo Piwigo: version 2.9.5 only

Published 2022-05-06. Last modified 2026-06-17.