Lucene search
HistorySep 08, 2009 - 10:30 a.m.
CVE-2008-7175
cve-2008-7175
cross-site scripting
xss
vulnerability
nextgen gallery
wordpress
plugin
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.6%
Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.
Affected configurations
Node
alex_rabenextgen_galleryRange≤0.96
ORalex_rabenextgen_galleryMatch0.33
ORalex_rabenextgen_galleryMatch0.34
ORalex_rabenextgen_galleryMatch0.35
ORalex_rabenextgen_galleryMatch0.36
ORalex_rabenextgen_galleryMatch0.37
ORalex_rabenextgen_galleryMatch0.39
ORalex_rabenextgen_galleryMatch0.40
ORalex_rabenextgen_galleryMatch0.41
ORalex_rabenextgen_galleryMatch0.42
ORalex_rabenextgen_galleryMatch0.43
ORalex_rabenextgen_galleryMatch0.50
ORalex_rabenextgen_galleryMatch0.51
ORalex_rabenextgen_galleryMatch0.52
ORalex_rabenextgen_galleryMatch0.60
ORalex_rabenextgen_galleryMatch0.61
ORalex_rabenextgen_galleryMatch0.62
ORalex_rabenextgen_galleryMatch0.63
ORalex_rabenextgen_galleryMatch0.64
ORalex_rabenextgen_galleryMatch0.70
ORalex_rabenextgen_galleryMatch0.71
ORalex_rabenextgen_galleryMatch0.72
ORalex_rabenextgen_galleryMatch0.73
ORalex_rabenextgen_galleryMatch0.74
ORalex_rabenextgen_galleryMatch0.80
ORalex_rabenextgen_galleryMatch0.81
ORalex_rabenextgen_galleryMatch0.82
ORalex_rabenextgen_galleryMatch0.83
ORalex_rabenextgen_galleryMatch0.90
ORalex_rabenextgen_galleryMatch0.91
ORalex_rabenextgen_galleryMatch0.92
ORalex_rabenextgen_galleryMatch0.93
ORalex_rabenextgen_galleryMatch0.94
ORalex_rabenextgen_galleryMatch0.95
wordpresswordpress
Related
patchstack
patchstack
WordPress NextGEN Gallery Plugin <= 0.96 - XSS
2009-09-07 00:00:00
cvelist
cvelist
CVE-2008-7175
2009-09-08 10:00:00
prion
prion
Cross site scripting
2009-09-08 10:30:00
nvd
nvd
CVE-2008-7175
2009-09-08 10:30:01
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.6%
Related for CVE-2008-7175