CVE-2022-48007

https://notcve.org/view.php?id=CVE-2022-48007

A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent. Una vulnerabilidad de cross-site scripting (XSS) almacenado en identification.php de Piwigo v13.4.0 permite a los atacantes ejecutar scripts web o HTML de su elección a través de un payload manipulado inyectado en el User-Agent. • https://github.com/Piwigo/Piwigo/issues/1835 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •