Information disclosure

In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the images1alttext parameter...

PT-2017-7557

Name of the Vulnerable Software and Affected Versions Photocrati NextGEN Gallery plugin version 2.1.15 Description The issue allows for XSS, which is possible for remote authenticated administrators. This occurs via the images1alttext parameter in the nggallery-manage-gallery page. Recommendation...