Alex Rabe: >> Nextgen Gallery >> 0.61 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
CVSS Score
4.3
EPSS Score
0.008
Published
2010-04-07
Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.
CVSS Score
4.3
EPSS Score
0.001
Published
2009-09-08