CVE-2020-19213: Piwigo

Critical severity, CVSS 9.8. EPSS: 15.9% chance of exploitation in the next 30 days.

SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.

Affected products

• Piwigo Piwigo: version 2.9.5 only

Published 2022-05-06. Last modified 2026-06-17.