Unscored CVE-2015-9537 EUVD-2015-9377GHSA-f5hx-6pcp-xgp3

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thu…

Published Nov 26, 2019 · Updated Aug 6, 2024 · Assigned by mitre

Description

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template.

References

https://wordpress.org/plugins/nextgen-gallery/#developers
https://github.com/cybersecurityworks/Disclosed/issues/1
https://www.openwall.com/lists/oss-security/2015/10/27/4
https://cybersecurityworks.com/zerodays/cve-2015-9537-nextgen.html