NextGEN Gallery

Stored DOMBased CrossSite Scripting via SimpleLightbox JavaScript Library <= 3.59.4

6.5

19 May, 2025

Admin+ Stored XSS vulnerability < 3.59.9

5.9

25 February, 2025

Authenticated (Contributor+) Stored DOMBased CrossSite Scripting via FancyBox JavaScript Library <= 3.59.4

6.5

3 December, 2024

Admin+ Stored XSS vulnerability < 3.59.5

5.9

25 November, 2024

Cross Site Scripting (XSS) vulnerability <= 3.59.3

5.9

22 July, 2024