CVE-2023-33361

CriticalCVSS 9.8

Published: 23/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.92%

55th percentile - higher than 55% of all known CVEs

Piwigo version 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.

Exploitation of this vulnerability could lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to update Piwigo to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.