Vulnerabilities > Alex Rabe > Nextgen Gallery > 1.3.4

DATE CVE VULNERABILITY TITLE RISK
2010-04-07 CVE-2010-1186 Cross-Site Scripting vulnerability in Alex Rabe Nextgen Gallery
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
4.3