| Package | Affected versions | Patched versions |
|---|---|---|
| nextgen gallery | = 0.33= 0.34= 0.35= 0.36= 0.37= 0.39= 0.40= 0.41= 0.42= 0.43= 0.50= 0.51= 0.52= 0.60= 0.61= 0.62= 0.63= 0.64= 0.70= 0.71= 0.72= 0.73= 0.74= 0.80= 0.81= 0.82= 0.83= 0.90= 0.91= 0.92= 0.93= 0.94= 0.95≤ 0.96 |
Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free