CVE-2023-33362

CriticalCVSS 9.8

Published: 23/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

9.06%

95th percentile - higher than 95% of all known CVEs

Piwigo version 13.6.0 is vulnerable to SQL Injection in the 'profile' function.

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to update Piwigo to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.