CVE-2008-7175

Опубликовано: 08 сент. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:alex_rabe:nextgen_gallery:*:*:*:*:*:*:*:*

Версия до 0.96 (включая)

cpe:2.3:a:alex_rabe:nextgen_gallery:0.33:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.34:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.35:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.36:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.37:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.39:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.40:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.41:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.42:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.43:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.50:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.51:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.52:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.60:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.61:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.62:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.63:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.64:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.70:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.71:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.72:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.73:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.74:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.80:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.81:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.82:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.83:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.90:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.91:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.92:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.93:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.94:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.95:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00136

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-5jv6-qv6x-6m4f

github

около 3 лет назад