CVE-2015-9537
The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template.
Date published : 2019-11-26
https://cybersecurityworks.com/zerodays/cve-2015-9537-nextgen.html