CVE-2019-13363

Published: 2019-09-13T13:15Z

Last Modified: 2024-11-21T04:24Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

admin.php?page=notification_by_mail in Piwigo 2.9.5 has XSS via the nbm_send_html_mail, nbm_send_mail_as, nbm_send_detailed_content, nbm_complementary_mail_content, nbm_send_recent_post_dates, or param_submit parameter. This is exploitable via CSRF. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt