FP
Vendor
Facetag Project
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2017-9426 | FA Facetag Facetag Project | 9.8 | Feb 26 | ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action |
| CVE-2017-9425 | FA Facetag Facetag Project | 6.1 | Feb 26 | The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action |