Vulnerability Details CVE-2018-1000172
Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.6%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
Products affected by CVE-2018-1000172
-
cpe:2.3:a:imagely:nextgen_gallery:-
-
cpe:2.3:a:imagely:nextgen_gallery:1.5.0
-
cpe:2.3:a:imagely:nextgen_gallery:1.5.1
-
cpe:2.3:a:imagely:nextgen_gallery:1.5.2
-
cpe:2.3:a:imagely:nextgen_gallery:1.5.3
-
cpe:2.3:a:imagely:nextgen_gallery:1.5.4
-
cpe:2.3:a:imagely:nextgen_gallery:1.5.5
-
cpe:2.3:a:imagely:nextgen_gallery:1.6.0
-
cpe:2.3:a:imagely:nextgen_gallery:1.6.1
-
cpe:2.3:a:imagely:nextgen_gallery:1.6.2
-
cpe:2.3:a:imagely:nextgen_gallery:1.7.0
-
cpe:2.3:a:imagely:nextgen_gallery:1.7.1
-
cpe:2.3:a:imagely:nextgen_gallery:1.7.2
-
cpe:2.3:a:imagely:nextgen_gallery:1.7.3
-
cpe:2.3:a:imagely:nextgen_gallery:1.7.4
-
cpe:2.3:a:imagely:nextgen_gallery:1.8.0
-
cpe:2.3:a:imagely:nextgen_gallery:1.8.1
-
cpe:2.3:a:imagely:nextgen_gallery:1.8.2
-
cpe:2.3:a:imagely:nextgen_gallery:1.8.3
-
cpe:2.3:a:imagely:nextgen_gallery:1.8.4
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.0
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.1
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.10
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.11
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.12
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.13
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.2
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.3
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.5
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.6
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.7
-
cpe:2.3:a:imagely:nextgen_gallery:1.9.8
-
cpe:2.3:a:imagely:nextgen_gallery:2.0
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.11
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.14
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.17
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.21
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.23
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.25
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.27
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.30
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.31
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.33
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.40
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.57
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.58
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.59
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.61
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.63
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.65
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.66
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.66.16
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.66.17
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.66.26
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.66.27
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.66.29
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.66.31
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.66.33
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.7
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.71
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.74
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.76
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.77
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.77.3
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.78
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.78.1
-
cpe:2.3:a:imagely:nextgen_gallery:2.0.79
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.0
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.10
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.13
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.15
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.18
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.19
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.2
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.23
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.26
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.27
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.31
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.33
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.43
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.44
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.45
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.46
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.49
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.50
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.54
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.56
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.57
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.59
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.60
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.61
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.62
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.69
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.7
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.77
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.79
-
cpe:2.3:a:imagely:nextgen_gallery:2.1.9
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.1
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.10
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.12
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.14
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.16
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.17
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.18
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.2
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.3
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.30
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.8
-
cpe:2.3:a:imagely:nextgen_gallery:2.2.9