Security Piwigo 2.7.2 Cross Site Scripting / SQL Injection December 19, 2014 007admin Piwigo version 2.7.2 suffers from cross site scripting and remote SQL injection vulnerabilities.