rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-21884 
Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users, /list_byod?usertype=raduser, /dhcp_leases, /go?rid=202 in which a specially crafted HTTP request may reconfigure the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-09T12:19:18.000Z
CVE-2020-21890 
Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21896 
A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21913 
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T13:55:28.000Z
CVE-2020-21929 
A stored cross site scripting (XSS) vulnerability in the web_copyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T21:18:16.000Z
CVE-2020-21930 
A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T21:18:18.000Z
CVE-2020-21932 
A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially authorized token and uid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:23:56.000Z
CVE-2020-21933 
An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where the admin password and private key could be found in the log tar package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:23:59.000Z
CVE-2020-21934 
An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:24:01.000Z
CVE-2020-21935 
A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:24:02.000Z
CVE-2020-21936 
An issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to access the components GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:24:04.000Z
CVE-2020-21937 
An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:24:06.000Z
CVE-2020-21967 
File upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to run arbitrary code via the add new file page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-13T19:01:57.000Z
CVE-2020-21976 
An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers to webshell and execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T17:41:43.000Z
CVE-2020-21987 
HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities occur when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-27T17:37:00.000Z
CVE-2020-21989 
HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-27T17:41:55.000Z
CVE-2020-21990 
Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T13:55:02.000Z
CVE-2020-21991 
AVE DOMINAplus <=1.10.x suffers from an authentication bypass vulnerability due to missing control check when directly calling the autologin GET parameter in changeparams.php script. Setting the autologin value to 1 allows an unauthenticated attacker to permanently disable the authentication security control and access the management interface with admin privileges without providing credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T13:58:50.000Z
CVE-2020-21992 
Inim Electronics SmartLiving SmartLAN/G/SI <=6.x suffers from an authenticated remote command injection vulnerability. The issue exist due to the 'par' POST parameter not being sanitized when called with the 'testemail' module through web.cgi binary. The vulnerable CGI binary (ELF 32-bit LSB executable, ARM) is calling the 'sh' executable via the system() function to issue a command using the mailx service and its vulnerable string format parameter allowing for OS command injection with root privileges. An attacker can remotely execute system commands as the root user using default credentials and bypass access controls in place.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T14:04:03.000Z
CVE-2020-21993 
In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T14:46:26.000Z
CVE-2020-21994 
AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful authentication bypass attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T14:50:56.000Z
CVE-2020-21995 
Inim Electronics Smartliving SmartLAN/G/SI <=6.x uses default hardcoded credentials. An attacker could exploit this to gain Telnet, SSH and FTP access to the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T14:10:23.000Z
CVE-2020-21996 
AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T14:54:48.000Z
CVE-2020-21997 
Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T14:17:28.000Z
CVE-2020-21998 
In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users. This can be exploited to redirect a user to an arbitrary website e.g. when a user clicks a specially crafted link to the affected script hosted on a trusted domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-27T17:46:42.000Z
CVE-2020-21999 
iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user via the 'strInIP' POST parameter in pingTest PHP script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-04T15:21:53.000Z
CVE-2020-22000 
HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploited with a CSRF vulnerability to execute arbitrary shell commands as the web user via the 'set_command_on' and 'set_command_off' POST parameters in '/system/systemplugins/customcommand/customcommand.plugin.php' by using an unsanitized PHP exec() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-27T17:51:17.000Z
CVE-2020-22001 
HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopback) IP address value allowing remote control of the smart home solution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-27T17:54:07.000Z
CVE-2020-22002 
An Unauthenticated Server-Side Request Forgery (SSRF) vulnerability exists in Inim Electronics Smartliving SmartLAN/G/SI <=6.x within the GetImage functionality. The application parses user supplied data in the GET parameter 'host' to construct an image request to the service through onvif.cgi. Since no validation is carried out on the parameter, an attacker can specify an external domain and force the application to make an HTTP request to an arbitrary destination host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T14:22:20.000Z
CVE-2020-22007 
OS Command Injection vulnerability in OKER G955V1 v1.03.02.20161128, allows physical attackers to interrupt the boot sequence and execute arbitrary commands with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-18T00:00:00.000Z
CVE-2020-22015 
Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-26T16:25:49.000Z
CVE-2020-22016 
A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T18:29:13.000Z
CVE-2020-22017 
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T18:27:39.000Z
CVE-2020-22019 
Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-26T19:13:44.000Z
CVE-2020-22020 
Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-26T19:08:08.000Z
CVE-2020-22021 
Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-26T19:25:31.000Z
CVE-2020-22022 
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T18:14:26.000Z
CVE-2020-22023 
A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T18:13:31.000Z
CVE-2020-22024 
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-26T20:18:27.000Z
CVE-2020-22025 
A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T18:11:20.000Z
CVE-2020-22026 
Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-26T20:31:30.000Z
CVE-2020-22027 
A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T18:05:41.000Z
CVE-2020-22028 
Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-26T20:39:05.000Z
CVE-2020-22029 
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T17:54:38.000Z
CVE-2020-22030 
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T17:55:25.000Z
CVE-2020-22031 
A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T17:44:04.000Z
CVE-2020-22032 
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T18:38:59.000Z
CVE-2020-22033 
A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which could let a remote malicious user cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T18:42:28.000Z
CVE-2020-22034 
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T18:46:40.000Z
CVE-2020-22035 
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T18:31:31.000Z
CVE-2020-22036 
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption and other potential consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T18:35:40.000Z
CVE-2020-22037 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T19:22:21.000Z
CVE-2020-22038 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T19:25:39.000Z
CVE-2020-22039 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T19:30:09.000Z
CVE-2020-22040 
A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T19:18:14.000Z
CVE-2020-22041 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T19:34:46.000Z
CVE-2020-22042 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T19:53:53.000Z
CVE-2020-22043 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T19:57:35.000Z
CVE-2020-22044 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T20:02:03.000Z
CVE-2020-22046 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T15:10:23.000Z
CVE-2020-22048 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T15:40:20.000Z
CVE-2020-22049 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T15:44:11.000Z
CVE-2020-22051 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T16:06:05.000Z
CVE-2020-22054 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T17:34:38.000Z
CVE-2020-22056 
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T17:55:54.000Z
CVE-2020-22057 
The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the default security descriptor which allows attackers to access sensitive components and data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-28T19:18:41.000Z
CVE-2020-22061 
SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-28T19:18:44.000Z
CVE-2020-22079 
Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-29T10:19:30.000Z
CVE-2020-22083 
jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used with un-trusted data
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T15:15:54.000Z
CVE-2020-22120 
A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T17:54:14.000Z
CVE-2020-22122 
A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T17:54:12.000Z
CVE-2020-22124 
A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T17:54:12.000Z
CVE-2020-22148 
A stored cross site scripting (XSS) vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T16:07:36.000Z
CVE-2020-22150 
A cross site scripting (XSS) vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T16:07:38.000Z