CVE-2023-34626

MediumCVSS 4.3

Published: 15/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.55%

41th percentile - higher than 41% of all known CVEs

Piwigo version 13.7.0 is vulnerable to SQL Injection via the 'Users' function.

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to update Piwigo to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function.