CVE-2018-1000172 | BDVDB-2026-100254 Detail

Description#

Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://fortiguard.com/zeroday/FG-VD-17-215
https://wordpress.org/plugins/nextgen-gallery/#developers

Exploit#

No public exploit known

History#

Version 12018-04-30Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.