CVE Database /
CVE-2024-5442
CVE · Medium
CVE-2024-5442 — Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-5442
|
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.9
|
< 3.59.3
|
3.59.3 |
2024-06-22 |
—
|
CVE-2024-5442
The NextGEN Gallery plugin for WordPress contains a stored cross-site scripting vulnerability in its gallery settings affecting versions through 3.59.2. Administrators on affected sites can inject malicious scripts through insufficiently sanitized gallery settings, which then execute when users view pages containing the injected content. This issue only impacts multisite WordPress installations or configurations where the unfiltered_html capability has been disabled. The vulnerability was resolved in version 3.59.3.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings