Vulnerabilities > Imagely > Nextgen Gallery > 2.2.16

DATE CVE VULNERABILITY TITLE RISK
2018-04-30 CVE-2018-1000172 Cross-site Scripting vulnerability in Imagely Nextgen Gallery
Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text.
network
low complexity
imagely CWE-79
4.8
4.8
2018-03-01 CVE-2018-7586 Path Traversal vulnerability in Imagely Nextgen Gallery
In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured.
network
low complexity
imagely CWE-22
7.5
7.5