CVE-2014-1980

Published: Aug 14, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin.

Affected (36)

Products: Piwigo: Piwigo

Piwigo

1 product

Piwigo

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Piwigo Piwigo	Up to 2.4.5
Piwigo Piwigo	Version 2.0.0
Piwigo Piwigo	Version 2.0.10
Piwigo Piwigo	Version 2.0.1
Piwigo Piwigo	Version 2.0.2
Piwigo Piwigo	Version 2.0.3
Piwigo Piwigo	Version 2.0.4
Piwigo Piwigo	Version 2.0.5
Piwigo Piwigo	Version 2.0.6
Piwigo Piwigo	Version 2.0.7
Piwigo Piwigo	Version 2.0.8
Piwigo Piwigo	Version 2.0.9
Piwigo Piwigo	Version 2.1.0
Piwigo Piwigo	Version 2.1.1
Piwigo Piwigo	Version 2.1.2
Piwigo Piwigo	Version 2.1.3
Piwigo Piwigo	Version 2.1.4
Piwigo Piwigo	Version 2.1.5
Piwigo Piwigo	Version 2.1.6
Piwigo Piwigo	Version 2.2.0
Piwigo Piwigo	Version 2.2.1
Piwigo Piwigo	Version 2.2.2
Piwigo Piwigo	Version 2.2.3
Piwigo Piwigo	Version 2.2.4
Piwigo Piwigo	Version 2.2.5
Piwigo Piwigo	Version 2.3.0
Piwigo Piwigo	Version 2.3.1
Piwigo Piwigo	Version 2.3.2
Piwigo Piwigo	Version 2.3.3
Piwigo Piwigo	Version 2.3.4
Piwigo Piwigo	Version 2.3.5
Piwigo Piwigo	Version 2.4.0
Piwigo Piwigo	Version 2.4.1
Piwigo Piwigo	Version 2.4.2
Piwigo Piwigo	Version 2.4.3
Piwigo Piwigo	Version 2.4.4