description: piwigo has XSS in password.php (incomplete fix for CVE-2012-4525)
problem types: in password.php, incomplete fix for CVE-2012-4525
affected:
{
product: piwigo
vendor: piwigo
versions:
status: affected, version: 2.4.4
}