The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template.
View Full Alert
Related Posts
CVE-2015-9229 (nextgen_gallery)In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the images[1][alttext] parameter. View Full Alert
CVE-2015-8313GnuTLS incorrectly validates the first byte of padding in CBC modes View Full Alert
CVE-2015-6960edx-platform before 2015-09-17 allows XSS via a team name. View Full Alert
