CVE-2021-40317: Piwigo

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.

Affected products

• Piwigo Piwigo: version 11.5.0 only

Published 2022-05-26. Last modified 2026-06-17.