WordPress Plugin Vulnerabilities

NextGEN Gallery <= 1.9.0 - Multiple Cross-Site Scripting (XSS)

Description

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Multiple Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
nextgen-gallery
Fixed in 1.9.1

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
357d1b2e-42c9-485a-8804-49b90cf27562

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2015-05-15 (about 8 years ago)

Other

Published
Title
Published
2023-10-16
Title
WP Simple Table Manager Plugin <= 1.5.6 - Admin+ Stored Cross-Site Scripting
Published
2023-02-02
Title
Ocean Extra < 2.1.2 - Contributor+ Stored XSS
Published
2022-02-14
Title
WP Event Manager < 3.1.23 - Admin+ Stored Cross-Site Scripting
Published
2023-09-21
Title
Magee Shortcodes <= 2.1.1 - Contributor+ Stored XSS via shortcode
Published
2014-08-01
Title
Duplicate Post 2.5 - options-general.php post Parameter Reflected XSS