WordPress Gallery Plugin – NextGEN Gallery, CVE-2016-6565
- CVE, Research URL
- Application
- Published on
- Jul 14, 2018
- Research Description
- The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user to read arbitrary files from the server, or execute arbitrary code on the server in some circumstances (dependent on server configuration).
- Affected versions
-
Min -, max 2.1.57.
- Status
-
vulnerable