Vulnerabilities > Imagely > Nextgen Gallery > 2.2.1

DATE CVE VULNERABILITY TITLE RISK
2018-04-30 CVE-2018-1000172 Cross-site Scripting vulnerability in Imagely Nextgen Gallery
Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text.
network
imagely CWE-79
3.5
2018-03-01 CVE-2018-7586 Path Traversal vulnerability in Imagely Nextgen Gallery
In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured.
network
low complexity
imagely CWE-22
5.0