Facetag Project Facetag vulnerabilities

• facetag project facetag ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter... CVE-2017-9426 9.8 CriticalFebruary 26, 2018
• facetag project facetag The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag... CVE-2017-9425 6.1 MediumFebruary 26, 2018