CVE-2021-31783: Piwigo Localfiles Editor

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

show_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check.

Affected products

• Piwigo Localfiles Editor: before 11.4.0.1 (fixed in 11.4.0.1)

Published 2021-04-26. Last modified 2026-06-17.