CVE-2023-33359

MediumCVSS 4.3

Published: 23/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Piwigo version 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the 'add tags' function.

An attacker could exploit this vulnerability to unauthorized tag additions, potentially leading to data manipulation within the application.

It is recommended to update Piwigo to the latest version to mitigate this vulnerability and implement additional CSRF protections.

Original NVD description (English source)

Piwigo 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the "add tags" function.