Facetag Project Facetag
2 CVEs affecting Facetag Project Facetag. Latest disclosed: 2018-02-26. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-9426 | Critical | 9.8 | 2018-02-26 | ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action. |
CVE-2017-9425 | Medium | 6.1 | 2018-02-26 | The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action. |