{"api_version":"1","generated_at":"2026-07-23T03:39:32+00:00","cve":"CVE-2008-7175","urls":{"html":"https://cve.report/CVE-2008-7175","api":"https://cve.report/api/cve/CVE-2008-7175.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-7175","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-7175"},"summary":{"title":"CVE-2008-7175","description":"Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-09-08 10:30:01","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://osvdb.org/51428","name":"http://osvdb.org/51428","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/493182/100/0/threaded","name":"http://www.securityfocus.com/archive/1/493182/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-7175","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-7175","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.33","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.34","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.35","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.36","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.39","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.40","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.41","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.42","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.43","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.50","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.52","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.60","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.61","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.62","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.63","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.64","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.70","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.71","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.72","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.73","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.74","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.80","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.81","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.82","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.83","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.90","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.91","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.92","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.93","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.94","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.95","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"1","versionEndIncluding":"0.96","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"7175","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T11:56:14.381Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"51428","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/51428"},{"name":"20080608 XSS - NEXTGEN GALLERY 0.96 WORDPRESS PLUGIN","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/493182/100/0/threaded"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-06-08T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"51428","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/51428"},{"name":"20080608 XSS - NEXTGEN GALLERY 0.96 WORDPRESS PLUGIN","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/493182/100/0/threaded"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-7175","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"51428","refsource":"OSVDB","url":"http://osvdb.org/51428"},{"name":"20080608 XSS - NEXTGEN GALLERY 0.96 WORDPRESS PLUGIN","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/493182/100/0/threaded"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-7175","datePublished":"2009-09-08T10:00:00.000Z","dateReserved":"2009-09-07T00:00:00.000Z","dateUpdated":"2024-08-07T11:56:14.381Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-09-08 10:30:01","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"0.96","matchCriteriaId":"10A17DCF-CA36-4753-9221-83876102456D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.33:*:*:*:*:*:*:*","matchCriteriaId":"26E4204A-4BA2-4C33-A710-3CE60D878E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.34:*:*:*:*:*:*:*","matchCriteriaId":"50C0A270-EA27-48BD-8D64-29E828F63ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.35:*:*:*:*:*:*:*","matchCriteriaId":"A5D79D5B-7B3D-4237-8171-46842328C1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.36:*:*:*:*:*:*:*","matchCriteriaId":"EC872D48-CCFD-4875-8AEA-B7A2436577A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.37:*:*:*:*:*:*:*","matchCriteriaId":"40854E84-09A4-4129-A2B0-08DA99E5EF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.39:*:*:*:*:*:*:*","matchCriteriaId":"0E8D4A40-6F78-4E5A-978B-62BA1E55087B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.40:*:*:*:*:*:*:*","matchCriteriaId":"15D03EEA-C197-44FE-A876-658EB96A46F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.41:*:*:*:*:*:*:*","matchCriteriaId":"E4C4D8AF-0FBE-44DC-8A61-4A19309721C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.42:*:*:*:*:*:*:*","matchCriteriaId":"E4E26C7B-D322-4D02-B538-F1A3D66B30BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.43:*:*:*:*:*:*:*","matchCriteriaId":"05AD5D83-6DD5-49C3-BA08-49B08E4E1840"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.50:*:*:*:*:*:*:*","matchCriteriaId":"A051BAEC-92D1-4691-91F8-960650FE3CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.51:*:*:*:*:*:*:*","matchCriteriaId":"43C3D5E4-B66D-4125-B238-B1214E16B98D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.52:*:*:*:*:*:*:*","matchCriteriaId":"BE91517A-34BE-4A5C-A18C-13BE00C41D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.60:*:*:*:*:*:*:*","matchCriteriaId":"57F767DA-EA78-48DE-BD21-B1B83689BEA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.61:*:*:*:*:*:*:*","matchCriteriaId":"0E581082-EF11-487B-B3BC-BBEEEB2D0D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.62:*:*:*:*:*:*:*","matchCriteriaId":"427728C9-A494-4F6B-AEB0-F20891DEF96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.63:*:*:*:*:*:*:*","matchCriteriaId":"3A6111C6-3F0B-43ED-86E7-F1E000EF3DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.64:*:*:*:*:*:*:*","matchCriteriaId":"DB844E83-F5AF-473C-8941-177D29997BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.70:*:*:*:*:*:*:*","matchCriteriaId":"6EB2CA50-8D2F-43FB-B46E-C339CA332876"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.71:*:*:*:*:*:*:*","matchCriteriaId":"206CCC66-F0BE-4DC4-899D-48452E7C7C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.72:*:*:*:*:*:*:*","matchCriteriaId":"6AE16C00-E4EB-4BCE-98C9-53624A6A3C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.73:*:*:*:*:*:*:*","matchCriteriaId":"D290E48B-7373-4B45-9B20-5304BD552849"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.74:*:*:*:*:*:*:*","matchCriteriaId":"D3C18566-A37D-48A3-B8E0-388B73FD02C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.80:*:*:*:*:*:*:*","matchCriteriaId":"C8AB81AC-E5A4-4E19-A496-7465E88460EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.81:*:*:*:*:*:*:*","matchCriteriaId":"E8E94D50-4413-4E88-94AC-983FF664E6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.82:*:*:*:*:*:*:*","matchCriteriaId":"D3CC5B94-A0F7-4CD4-837E-BFD5601415F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.83:*:*:*:*:*:*:*","matchCriteriaId":"D8FA1DD5-DAE2-40B0-B51E-8EEFBC027353"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.90:*:*:*:*:*:*:*","matchCriteriaId":"CB81F577-5B52-4309-A7CE-DB24EDE52B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.91:*:*:*:*:*:*:*","matchCriteriaId":"2DC708AA-C4D5-4DAA-BDFB-66D218C7B832"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.92:*:*:*:*:*:*:*","matchCriteriaId":"935E1759-87D1-4B54-B199-70828CC5474E"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.93:*:*:*:*:*:*:*","matchCriteriaId":"834ECC39-7DA7-48FC-A97C-1B79BC115DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.94:*:*:*:*:*:*:*","matchCriteriaId":"029EE532-F83D-47D5-BDBC-344C74E50989"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.95:*:*:*:*:*:*:*","matchCriteriaId":"5DC41F9F-FD8C-49C4-8F9E-4A772B16353C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"7175","Ordinal":"1","Title":"CVE-2008-7175","CVE":"CVE-2008-7175","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"7175","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.","Type":"Description","Title":"CVE-2008-7175"},{"CveYear":"2008","CveId":"7175","Ordinal":"2","NoteData":"2009-09-08","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"7175","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}