CVE-2014-3123

no score yetEPSS 1.6%

Cross-site scripting (XSS) vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN Manage gallery, or NextGEN Manage others gallery permission to inject arbitrary web script or HTML via the "Alt & Title Text" field.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-05-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wpgetready:nextcellent_gallery

References

http://secunia.com/advisories/58031
http://www.securityfocus.com/bid/67085
http://www.vapid.dhs.org/advisories/wordpress/plugins/nextCellent-gallery-1.9.13
https://wordpress.org/plugins/nextcellent-gallery-nextgen-legacy/changelog
http://secunia.com/advisories/58031

Check your stack JSON