Back to Database
Status published
Medium
CVE-2008-7175
Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-7175
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
alex rabe
View all reports →Affected Software
nextgen gallery
Vulnerable Versions:
0, 0.33, 0.34, 0.35, 0.36, 0.37, 0.39, 0.40, 0.41, 0.42, 0.43, 0.50, 0.51, 0.52, 0.60, 0.61, 0.62, 0.63, 0.64, 0.70, 0.71, 0.72, 0.73, 0.74, 0.80, 0.81, 0.82, 0.83, 0.90, 0.91, 0.92, 0.93, 0.94, 0.95
Timeline
Official Publish:
September 8th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.