Vulnerabilities

TI-2010-01142 CVE-2010-1186 · GHSA-4qcr-6cxp-cwxc

Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery…

LOW 28

Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04727 Published 2010-04-07 No fix listed CWE-79

TI-2008-06863 CVE-2008-7175 · GHSA-5jv6-qv6x-6m4f

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96…

LOW 23

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01467 Published 2009-09-08 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery…

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96…