CVE Database /
CVE-2008-7175
CVE
CVE-2008-7175 — Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] <= 0.96
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2008-7175
|
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] <= 0.96 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Unknown
|
< 0.96
|
0.96 |
2008-06-07 |
—
|
CVE-2008-7175
The NextGEN Gallery plugin for WordPress contains a stored cross-site scripting vulnerability in the gallery description field that affects versions up to 1.9.0. Attackers with administrative privileges can inject malicious scripts into gallery descriptions due to inadequate sanitization and escaping of user input. The vulnerability only impacts multi-site WordPress installations or those where the unfiltered_html capability has been disabled, allowing injected scripts to execute when users view affected gallery pages.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings