Nextgen Smooth Gallery Vulnerabilities

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Update the plugin.

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

May 15, 2015

The NextGEN Smooth Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘galleryID’ parameter in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

CVSS:

6.1

Affected:

up to 1.2

Fix:

No patched version reported

Disclosed:

Sep 3, 2013

The NextGEN Smooth Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘galleryID’ parameter in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

Affected:

up to 1.2

Fix:

No patched version reported

Disclosed:

Sep 3, 2013

This NextGEN Smooth Gallery plugin is prone to an SQL injection vulnerability. It fails to clean up user's data before using it in an SQL query. Also, this plugin allows an attacker to compromise the access, application, modify data or exploit hidden vulnerabilities in the underlying database.

Affected:

up to 1.3

Fixed in:

1.3

Disclosed:

Aug 3, 2010

The nextgen-smooth-gallery WordPress plugin was affected by a Blind SQL Injection security vulnerability.

Affected:

up to 1.2

Fix:

No patched version reported

The nextgen-smooth-gallery WordPress plugin was affected by a XSS security vulnerability.

Affected:

up to 1.2

Fix:

No patched version reported