Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| alex_rabe | nextgen_gallery | 0.36 |
| alex_rabe | nextgen_gallery | 0.92 |
| alex_rabe | nextgen_gallery | 0.99 |
| alex_rabe | nextgen_gallery | 0.42 |
| alex_rabe | nextgen_gallery | 0.61 |
| alex_rabe | nextgen_gallery | 0.60 |
| alex_rabe | nextgen_gallery | 0.96 |
| alex_rabe | nextgen_gallery | 0.50 |
| alex_rabe | nextgen_gallery | 0.97 |
| alex_rabe | nextgen_gallery | 1.1.0 |
| alex_rabe | nextgen_gallery | 1.2.1 |
| alex_rabe | nextgen_gallery | 0.81 |
| alex_rabe | nextgen_gallery | 0.91 |
| alex_rabe | nextgen_gallery | 0.62 |
| alex_rabe | nextgen_gallery | 1.2.0 |
| alex_rabe | nextgen_gallery | 0.70 |
| alex_rabe | nextgen_gallery | 1.4.2 |
| alex_rabe | nextgen_gallery | 0.39 |
| alex_rabe | nextgen_gallery | 1.4.1 |
| alex_rabe | nextgen_gallery | 0.35 |
| alex_rabe | nextgen_gallery | 0.80 |
| alex_rabe | nextgen_gallery | 0.63 |
| alex_rabe | nextgen_gallery | 0.83 |
| alex_rabe | nextgen_gallery | 1.3.5 |
| alex_rabe | nextgen_gallery | 0.43 |
| alex_rabe | nextgen_gallery | 0.82 |
| alex_rabe | nextgen_gallery | 0.98 |
| alex_rabe | nextgen_gallery | 0.71 |
| alex_rabe | nextgen_gallery | 0.95 |
| alex_rabe | nextgen_gallery | 1.0.1 |
| alex_rabe | nextgen_gallery | 1.5.0 |
| alex_rabe | nextgen_gallery | 1.4.3 |
| alex_rabe | nextgen_gallery | 0.94 |
| alex_rabe | nextgen_gallery | 1.3.6 |
| alex_rabe | nextgen_gallery | 0.33 |
| alex_rabe | nextgen_gallery | 0.90 |
| alex_rabe | nextgen_gallery | 0.41 |
| alex_rabe | nextgen_gallery | 0.52 |
| alex_rabe | nextgen_gallery | 0.40 |
| alex_rabe | nextgen_gallery | 1.3.1 |
| alex_rabe | nextgen_gallery | 0.72 |
| alex_rabe | nextgen_gallery | 1.3.2 |
| alex_rabe | nextgen_gallery | 0.64 |
| alex_rabe | nextgen_gallery | 1.0.2 |
| alex_rabe | nextgen_gallery | * |
| alex_rabe | nextgen_gallery | 1.4.0 |
| alex_rabe | nextgen_gallery | 0.51 |
| alex_rabe | nextgen_gallery | 0.74 |
| alex_rabe | nextgen_gallery | 0.93 |
| alex_rabe | nextgen_gallery | 1.3.0 |
| alex_rabe | nextgen_gallery | 1.3.4 |
| alex_rabe | nextgen_gallery | 0.37 |
| alex_rabe | nextgen_gallery | 1.3.3 |
| alex_rabe | nextgen_gallery | 0.34 |
| alex_rabe | nextgen_gallery | 1.0.0 |
| alex_rabe | nextgen_gallery | 0.73 |