VULNERABILITY INTELLIGENCE

CVE-2024-28662

CVSS score5.4 MEDIUM

EPSS probability0.43%

CISA KEVNot currently listed

Published2024-03-13

Last modified2026-06-17

Description

A Cross Site Scripting vulnerability exists in Piwigo before 14.3.0 script because of missing sanitization in create_tag in admin/include/functions.php.