CVE-2022-38468

MEDIUM CVSS: 4.3 Published: 2023-03-01 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin <= 3.28 leading to thumbnail alteration.

Affected Platforms

Imagely Nextgen Gallery

Weakness Type

CWE-352, CWE-352

References