Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to delete permalinks via a crafted request.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-10678.json"