CVE Database /
CVE-2024-10545
CVE · Low
CVE-2024-10545 — Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-10545
|
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.9 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Low
3.5
|
< 3.59.9
|
3.59.9 |
2025-02-04 |
—
|
CVE-2024-10545
The NextGEN Gallery plugin contains a stored cross-site scripting vulnerability affecting versions 3.59.8 and earlier through inadequately sanitized and unescaped administrator settings. Authenticated users with administrator access or higher privileges can inject malicious scripts into pages that execute when other users view those pages. The vulnerability only impacts WordPress multisite configurations and installations where the unfiltered_html capability has been restricted.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings