Lucene search
Larry W. CashdollarPATCHSTACK:BA288BAEC8E4E0B925F1236A1BD41C83HistoryApr 29, 2014 - 12:00 a.m.
WordPress NextCellent Gallery Plugin <= 1.19.17 - XSS
2014-04-2900:00:00
Larry W. Cashdollar
patchstack.com
8
0.001 Low
EPSS
Percentile
42.4%
Because of this vulnerability in admin/manage-images.php, authenticated users can inject arbitrary web script or HTML via the “Alt & Title Text” field.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcellent gallery | le | 1.19.17 |
Related
nvd
nvd
CVE-2014-3123
2014-05-08 14:29:15
wpvulndb
wpvulndb
NextCellent Gallery < 1.9.18 - Multiple Stored XSS
2014-08-01 00:00:00
prion
prion
Cross site scripting
2014-05-08 14:29:00
cve
cve
CVE-2014-3123
2014-05-08 14:29:15
cvelist
cvelist
CVE-2014-3123
2014-05-08 14:00:00