← Database

CVE-2008-7175

MEDIUM CVSS: 4.3 Published: 2009-09-08 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.

Affected Platforms

Wordpress WordpressAlex Rabe Nextgen Gallery

Weakness Type

CWE-79

References