CVE-2021-40678: Piwigo

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit.

Affected products

• Piwigo Piwigo: version 11.5.0 only

Published 2022-06-14. Last modified 2026-06-17.