CVEvulnerability

CVE-2008-7175

4.3 MEDIUM Published 2009-09-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-09-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.

Affected configurations

• alex rabe nextgen gallery (<= 0.96) • alex rabe nextgen gallery 0.33 • alex rabe nextgen gallery 0.34 • alex rabe nextgen gallery 0.35 • alex rabe nextgen gallery 0.36 • alex rabe nextgen gallery 0.37 • alex rabe nextgen gallery 0.39 • alex rabe nextgen gallery 0.40 • alex rabe nextgen gallery 0.41 • alex rabe nextgen gallery 0.42 • alex rabe nextgen gallery 0.43 • alex rabe nextgen gallery 0.50 • alex rabe nextgen gallery 0.51 • alex rabe nextgen gallery 0.52 • alex rabe nextgen gallery 0.60 • alex rabe nextgen gallery 0.61 • alex rabe nextgen gallery 0.62 • alex rabe nextgen gallery 0.63 • alex rabe nextgen gallery 0.64 • alex rabe nextgen gallery 0.70 • alex rabe nextgen gallery 0.71 • alex rabe nextgen gallery 0.72 • alex rabe nextgen gallery 0.73 • alex rabe nextgen gallery 0.74 • alex rabe nextgen gallery 0.80 • alex rabe nextgen gallery 0.81 • alex rabe nextgen gallery 0.82 • alex rabe nextgen gallery 0.83 • alex rabe nextgen gallery 0.90 • alex rabe nextgen gallery 0.91 • alex rabe nextgen gallery 0.92 • alex rabe nextgen gallery 0.93 • alex rabe nextgen gallery 0.94 • alex rabe nextgen gallery 0.95

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References