Vulnerabilities > Imagely > Nextgen Gallery > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-09-12 CVE-2015-9229 Cross-site Scripting vulnerability in Imagely Nextgen Gallery 2.1.15
In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the images[1][alttext] parameter.
network
low complexity
imagely CWE-79
4.8