Advisories · Technology
Photo Engine (Media Organizer & Lightroom).
Every CVE that names Photo Engine (Media Organizer & Lightroom) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Photo Engine < 6.6.0 - Author+ Arbitrary Content Modification via IDOR
- Photo Engine (Media Organizer & Lightroom)
- Broken access control
- CVSS 4.9 Medium
Photo Engine < 6.5.8 - Author+ Arbitrary Attachment Deletion via IDOR
- Photo Engine (Media Organizer & Lightroom)
- Broken access control
- CVSS 6.8 Medium
Photo Engine < 6.5.8 - Author+ Stored XSS via Collection Name
- Photo Engine (Media Organizer & Lightroom)
- Cross-site scripting (XSS)