CVE-2010-1707: Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remot...

Security readout for executives and security teams

CVE-2010-1707 is a cross-site scripting issue in Piwigo's registration page. An attacker could inject script or HTML through registration fields, potentially affecting users who view the resulting page content. The source bundle does not provide a CVSS score or current exploitation evidence. Exposure is most likely where legacy Piwigo 2.0.9 or earlier remains reachable, especially if public user registration is enabled. Modern, supported Piwigo deployments may not be affected, but the provided sources do not define the full fixed-version boundary. Treat this as a legacy web-application hygiene issue. It is not supported by active-exploitation evidence in the bundle, but exposed obsolete Piwigo installations with registration enabled should be prioritized for upgrade or retirement. Mitigation focus: Inventory Piwigo deployments and identify versions 2.0.9 or earlier.; Upgrade affected installations after checking current Piwigo vendor guidance.; Restrict or disable public registration until remediation is confirmed..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.