Unscored CVE-2008-7175 EUVD-2008-7134GHSA-5jv6-qv6x-6m4f

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attac…

Published Sep 8, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.

References

51428 vdb-entry
20080608 XSS - NEXTGEN GALLERY 0.96 WORDPRESS PLUGIN mailing-list