CVE-2015-9537

Description

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template.

References

https://www.openwall.com/lists/oss-security/2015/10/27/4

https://wordpress.org/plugins/nextgen-gallery/#developers

https://github.com/cybersecurityworks/Disclosed/issues/1

https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-9377

https://cybersecurityworks.com/zerodays/cve-2015-9537-nextgen.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS