CVE-2014-3123

🗓️ 08 May 2014 14:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 36 Views🌐 WEB

XSS vulnerability in NextCellent Gallery plugin for WordPress

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2014-3123	8 May 201414:00	–	cvelist
EUVD	EUVD-2014-3143	7 Oct 202500:30	–	euvd
NVD	CVE-2014-3123	8 May 201414:29	–	nvd
Patchstack	WordPress NextCellent Gallery Plugin <= 1.19.17 - XSS	29 Apr 201400:00	–	patchstack
Prion	Cross site scripting	8 May 201414:29	–	prion
WPVulnDB	NextCellent Gallery < 1.9.18 - Multiple Stored XSS	1 Aug 201400:00	–	wpvulndb

NVD

Node

wpgetready nextcellent_galleryRange≤1.9.17wordpress

OR

wpgetready nextcellent_galleryMatch1.9.14wordpress

OR

wpgetready nextcellent_galleryMatch1.9.15wordpress

OR

wpgetready nextcellent_galleryMatch1.9.16wordpress

Source	Link
vapid	www.vapid.dhs.org/advisories/wordpress/plugins/nextCellent-gallery-1.9.13
wordpress	www.wordpress.org/plugins/nextcellent-gallery-nextgen-legacy/changelog
secunia	www.secunia.com/advisories/58031
securityfocus	www.securityfocus.com/bid/67085

Parameter	Position	Path	Description	CWE
Alt Text	request body	admin/manage-images.php	Cross-site scripting via Alt & Title Text field in admin/manage-images.php	CWE-79
Title Text	request body	admin/manage-images.php	Cross-site scripting via Alt & Title Text field in admin/manage-images.php	CWE-79

06 May 2026 22:30Current

5.5Medium risk

Vulners AI Score5.5

CVSS 22.1

EPSS0.00245

cve-2014-3123 cross-site scripting xss nextcellent gallery wordpress nvd