Description

WordPress Plugin NextGEN Gallery-WordPress Gallery is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin NextGEN Gallery-WordPress Gallery version 2.0.77.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.0.79 or latest

References

https://wordpress.org/plugins/nextgen-gallery/changelog/

Related Vulnerabilities

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3094)

Joomla! Core 3.x.x Cross-Site Scripting (3.1.0 - 3.9.23)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5240)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11029)

WordPress Plugin Users to CSV Cross-Site Request Forgery (1.4.5)

Severity

High

Tags

Missing Update