CVEvulnerability
CVE-2010-1186
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-04-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
Affected configurations
• alex rabe nextgen gallery (<= 1.5.1)
• alex rabe nextgen gallery 0.33
• alex rabe nextgen gallery 0.34
• alex rabe nextgen gallery 0.35
• alex rabe nextgen gallery 0.36
• alex rabe nextgen gallery 0.37
• alex rabe nextgen gallery 0.39
• alex rabe nextgen gallery 0.40
• alex rabe nextgen gallery 0.41
• alex rabe nextgen gallery 0.42
• alex rabe nextgen gallery 0.43
• alex rabe nextgen gallery 0.50
• alex rabe nextgen gallery 0.51
• alex rabe nextgen gallery 0.52
• alex rabe nextgen gallery 0.60
• alex rabe nextgen gallery 0.61
• alex rabe nextgen gallery 0.62
• alex rabe nextgen gallery 0.63
• alex rabe nextgen gallery 0.64
• alex rabe nextgen gallery 0.70
• alex rabe nextgen gallery 0.71
• alex rabe nextgen gallery 0.72
• alex rabe nextgen gallery 0.73
• alex rabe nextgen gallery 0.74
• alex rabe nextgen gallery 0.80
• alex rabe nextgen gallery 0.81
• alex rabe nextgen gallery 0.82
• alex rabe nextgen gallery 0.83
• alex rabe nextgen gallery 0.90
• alex rabe nextgen gallery 0.91
• alex rabe nextgen gallery 0.92
• alex rabe nextgen gallery 0.93
• alex rabe nextgen gallery 0.94
• alex rabe nextgen gallery 0.95
• alex rabe nextgen gallery 0.96
• alex rabe nextgen gallery 0.97
• alex rabe nextgen gallery 0.98
• alex rabe nextgen gallery 0.99
• alex rabe nextgen gallery 1.0.0
• alex rabe nextgen gallery 1.0.1
• alex rabe nextgen gallery 1.0.2
• alex rabe nextgen gallery 1.1.0
• alex rabe nextgen gallery 1.2.0
• alex rabe nextgen gallery 1.2.1
• alex rabe nextgen gallery 1.3.0
• alex rabe nextgen gallery 1.3.1
• alex rabe nextgen gallery 1.3.2
• alex rabe nextgen gallery 1.3.3
• alex rabe nextgen gallery 1.3.4
• alex rabe nextgen gallery 1.3.5
• alex rabe nextgen gallery 1.3.6
• alex rabe nextgen gallery 1.4.0
• alex rabe nextgen gallery 1.4.1
• alex rabe nextgen gallery 1.4.2
• alex rabe nextgen gallery 1.4.3
• alex rabe nextgen gallery 1.5.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/39341 secunia.com
- http://wordpress.org/extend/plugins/nextgen-gallery/changelog/ Patch
- http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability Exploit
- http://www.exploit-db.com/exploits/12098 www.exploit-db.com
- http://www.securityfocus.com/bid/39250 Exploit
- http://www.vupen.com/english/advisories/2010/0821 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57562 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/39341 secunia.com
- http://wordpress.org/extend/plugins/nextgen-gallery/changelog/ Patch
- http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability Exploit
- http://www.exploit-db.com/exploits/12098 www.exploit-db.com
- http://www.securityfocus.com/bid/39250 Exploit
- http://www.vupen.com/english/advisories/2010/0821 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57562 exchange.xforce.ibmcloud.com