.. / CVE-2023-44393

• XSS
• Nuclei
• Web

Exploit for Piwigo - Cross-Site Scripting (CVE-2023-44393)

Description:

Piwigo is vulnerable to a reflected XSS in the admin panel where the plugin_id parameter is not properly sanitized.

Nuclei Template

View the template here CVE-2023-44393.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-44393.yaml

References: