Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple HTML Injection Vulnerabilities - Vulnerability Database
WP Plugin Nextgen Gallery

WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple HTML Injection Vulnerabilities

Medium
Reference: No Reference
Title: WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple HTML Injection Vulnerabilities
Overview:

WordPress Plugin NextGEN Gallery-WordPress Gallery is prone to multiple HTML injection vulnerabilities because it fails to properly sanitize user-supplied input. Attacker supplied HTML and script code could be executed in the context of the affected site potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user other attacks may also be possible. WordPress Plugin NextGEN Gallery-WordPress Gallery version 1.9.0 is vulnerable prior versions may also be affected.