CVE Database /
CVE-2015-9537
CVE · Medium
CVE-2015-9537 — Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.10
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2015-9537
|
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.10 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 2.1.10
|
2.1.10 |
2015-08-31 |
—
|
CVE-2015-9537
The NextGEN Gallery plugin for WordPress prior to version 2.1.10 contained multiple cross-site scripting vulnerabilities through various parameters including thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, wmYpos, and template functionality. These flaws allowed attackers to inject malicious scripts that could be executed in users' browsers when processing gallery settings and templates. The vulnerabilities affected all installations running versions before 2.1.10.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings