NVD

Id
31377  
Name
CVE-2014-3123  
Description
Cross-site scripting (XSS) vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN Manage gallery, or NextGEN Manage others gallery permission to inject arbitrary web script or HTML via the "Alt & Title Text" field.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-05-08  
Modified Date
2014-05-09  
Seq
2014-3123  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164268 31377 CVE-2014-3123 67085  View
164269 31377 CVE-2014-3123 http://www.vapid.dhs.org/advisories/wordpress/plugins/nextCellent-gallery-1.9.13  View
164270 31377 CVE-2014-3123 https://wordpress.org/plugins/nextcellent-gallery-nextgen-legacy/changelog  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13569 JVNDB-2014-002444 WordPress 用 NextCellent Gallery プラグインの admin/manage-images.php におけるクロスサイトスクリプティングの脆弱性 WordPress 用 NextCellent Gallery プラグインの admin/manage-images.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-3123 70410 CVE-2014-3123 31377 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002444.html 2014-04-23 2014-05-12 View