Advisories · Technology
tigroumeow Photo Engine (Media Organizer & Lightroom).
Every CVE that names tigroumeow Photo Engine (Media Organizer & Lightroom) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Photo Engine (Media Organizer & Lightroom) <= 6.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Collection Name
- tigroumeow Photo Engine (Media Organizer & Lightroom)
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Photo Engine (Media Organizer & Lightroom) <= 6.5.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload via /?wplr-sync-api 'delete' / 'sync' action
- tigroumeow Photo Engine (Media Organizer & Lightroom)
- Broken access control