PT-2026-134506

Name of the Vulnerable Software and Affected Versions NextGEN Gallery versions prior to 4.4.2 Description Remote Code Execution is possible for authenticated attackers with custom-level access and above. The issue occurs via the render image function due to unrestricted mass assignment of...