PT-2014-5100

Name of the Vulnerable Software and Affected Versions NextCellent Gallery plugin versions prior to 1.19.18 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote authenticated users with specific permissions to inject arbitrary web script or...

CVE-2014-3123: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN Manage gallery, or NextGEN Manage others gallery permission to inject arbitrary web script or...