CVE-2010-1186

Опубликовано: 07 апр. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:alex_rabe:nextgen_gallery:*:*:*:*:*:*:*:*

Версия до 1.5.1 (включая)

cpe:2.3:a:alex_rabe:nextgen_gallery:0.33:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.34:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.35:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.36:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.37:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.39:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.40:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.41:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.42:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.43:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.50:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.51:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.52:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.60:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.61:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.62:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.63:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.64:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.70:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.71:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.72:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.73:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.74:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.80:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.81:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.82:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.83:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.90:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.91:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.92:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.93:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.94:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.95:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.96:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.97:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.98:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:0.99:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.5:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.6:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:alex_rabe:nextgen_gallery:1.5.0:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00818

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-4qcr-6cxp-cwxc

github

около 3 лет назад