piwigo — Vulnerabilities & Security Advisories 11

Piwigo serves as an open-source photo gallery management system primarily used for organizing and sharing images online. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting attacks, and privilege escalation flaws, with 11 CVEs documented to date. The platform's security posture has been challenged by issues related to insufficient input validation and improper access controls, though no major public security incidents have been widely reported. Users are advised to maintain regular updates and implement proper hardening measures, as the application's web-based nature and extensibility through plugins create potential attack surfaces that require ongoing security attention.