EIP-2026-111298

This exploit demonstrates a stored XSS vulnerability in Piwigo v13.7.0, where an authenticated user can inject malicious JavaScript via the photo description field. The payload is triggered when the photo is viewed on the homepage.