CVE-2018-1000172

Publication date

2018-04-30 22:00:00

Family

mitre

State

PUBLISHED

Description

Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45.