Photoview vulnerabilities
We track 2 vulnerabilities in Photoview products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Photoview vulnerabilities
- 7.5 High severity
Photoview: Improper Neutralization of Special Elements used in an SQL Command
Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the album_id path segment. Attackers can supply crafted SQL expressions in the album_id parameter to
- 7.1 High severity
photoview: Authorization Bypass Through User-Controlled Key
Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows authenticated users to create share links for albums owned by other users. Attackers can supply arbitrary album IDs to generate working share