Sploitus

CVE-2019-13364

3 known exploits for CVE-2019-13364

admin.php?page=account_billing in Piwigo 2.9.5 has XSS via the vat_number, billing_name, company, or billing_address parameter. This is exploitable via CSRF.

Affected products
Piwigo
Piwigo
= 2.9.5
Fix
Available
CVSS 3.1
9.6 CRITICAL
EPSS
1.4% (70th percentile)
Weakness
CWE-352, CWE-79
NVD status
Modified
Published
2019-09-13
CVE-2019-13364 at NVD
Authoritative description, scoring and affected products

3 known exploits for CVE-2019-13364

Proof-of-concept code and exploit modules indexed by Sploitus

Gila CMS 1.11.5 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities
2020-06-24 Rodolfo TavaresZDT
GilaCMS 1.11.5 Cross Site Request Forgery / Cross Site Scripting
2020-06-23 Rodolfo TavaresPACKETSTORM
Piwigo 2.9.5 Cross Site Request Forgery / Cross Site Scripting
2019-09-13 Rodolfo TavaresPACKETSTORM