WordPress Plugin Vulnerabilities

NextCellent Gallery < 1.9.18 - Multiple Stored XSS

Description

The NextCellent Gallery – NextGEN Legacy WordPress plugin was affected by a Multiple Stored XSS security vulnerability.

Affects Plugins

Plugin icon
nextcellent-gallery-nextgen-legacy
Fixed in 1.9.18

References

CVE
CVE-2014-3123

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
8533b397-7a10-4d34-a8e9-74c097c9a8e7

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2026-03-12
Title
Calculated Fields Form < 5.4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings
Published
2022-02-02
Title
WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site Scripting
Published
2024-07-03
Title
WP ULike < 4.7.1 - Admin+ Stored XSS
Published
2025-01-16
Title
Goo.gl Url Shorter <= 1.0.1 - Reflected Cross-Site Scripting
Published
2025-12-11
Title
Simple AL Slider <= 1.2.10 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']