CVE-2010-1186

The CVE-2010-1186 entry documents a Cross-Site Scripting (XSS) vulnerability in the NextGEN Gallery WordPress plugin. Affected component: xml/media-rss.php; vulnerable until version 1.5.2 where the mode parameter is reflected without proper escaping, enabling remote attackers to inject arbitrary ...

CVE-2008-7175

The CVE refers to a cross-site scripting (XSS) vulnerability in the WordPress NextGEN Gallery plugin (