Vendor
Piwigo versions up to 16.3.0 contain a path traversal vulnerability in the i.php component, allowing remote unauthenticated attackers to access unauthorized files on the host system.