CVE-2014-3123

The CVE-2014-3123 entry describes a Cross-site Scripting (XSS) vulnerability in the NextCellent Gallery WordPress plugin. The issue resides in admin/manage-images.php and affects versions before 1.19.18, allowing remote authenticated users who have NextGEN Upload images, NextGEN Manage gallery, o...