CVE-2020-9468: Piwigo

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the image_id parameter.

Affected products

• Piwigo Piwigo: version 2.9.0 only

Published 2020-03-26. Last modified 2026-06-17.