NuytsTech Security

CVE-2018-1000172

by ·

Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45.

Date published : 2018-04-30

https://fortiguard.com/zeroday/FG-VD-17-215

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Tags: