touhidshaikh.com
http://touhidshaikh.com/blog/poc/facetag-ext-piwigo-stored-xss CVE-2017-9425
MEDIUM
Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting
Record summary
CVE-2017-9425 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.
Description
The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPiwigo Plugin Facetag 0.0.3 - Cross-Site ScriptingExploitDB exploitby Touhid M.ShaikhNot analyzed1 file
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-9425 42098exploit
https://www.exploit-db.com/exploits/42098 youtube.com
https://www.youtube.com/watch?v=_ha7XBT_Omo