WordPress plugin NGG Smart Image Search has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-6439

Name of the Vulnerable Software and Affected Versions NGG Smart Image Search plugin for WordPress versions up to, and including, 3.2.1 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's hr SIS nextgen searchbox...