{"api_version":"1","generated_at":"2026-07-23T09:35:17+00:00","cve":"CVE-2010-1186","urls":{"html":"https://cve.report/CVE-2010-1186","api":"https://cve.report/api/cve/CVE-2010-1186.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-1186","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-1186"},"summary":{"title":"CVE-2010-1186","description":"Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-04-07 15:30:00","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/39250","name":"http://www.securityfocus.com/bid/39250","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"NextGEN Gallery WordPress Plugin 'xml/media-rss.php' Cross Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/39341","name":"http://secunia.com/advisories/39341","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WordPress NextGEN Gallery Plugin \"mode\" Cross-Site Scripting - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/0821","name":"http://www.vupen.com/english/advisories/2010/0821","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/57562","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/57562","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/12098","name":"http://www.exploit-db.com/exploits/12098","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"XSS Vulnerability in NextGEN Gallery Wordpress Plugin","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://wordpress.org/extend/plugins/nextgen-gallery/changelog/","name":"http://wordpress.org/extend/plugins/nextgen-gallery/changelog/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"WordPress › NextGEN Gallery « WordPress Plugins","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability","name":"http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Core Security Technologies","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1186","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1186","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.33","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.34","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.35","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.36","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.39","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.40","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.41","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.42","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.43","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.50","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.52","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.60","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.61","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.62","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.63","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.64","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.70","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.71","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.72","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.73","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.74","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.80","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.81","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.82","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.83","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.90","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.91","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.92","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.93","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.94","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.95","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.96","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.97","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.98","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"0.99","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"1.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"1","versionEndIncluding":"1.5.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alex_rabe","cpe5":"nextgen_gallery","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1186","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T01:14:06.658Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"12098","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/12098"},{"name":"39341","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/39341"},{"name":"39250","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/39250"},{"name":"nextgen-mode-xss(57562)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/57562"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://wordpress.org/extend/plugins/nextgen-gallery/changelog/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability"},{"name":"ADV-2010-0821","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/0821"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-04-06T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"12098","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/12098"},{"name":"39341","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/39341"},{"name":"39250","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/39250"},{"name":"nextgen-mode-xss(57562)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/57562"},{"tags":["x_refsource_CONFIRM"],"url":"http://wordpress.org/extend/plugins/nextgen-gallery/changelog/"},{"tags":["x_refsource_MISC"],"url":"http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability"},{"name":"ADV-2010-0821","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/0821"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-1186","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"12098","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/12098"},{"name":"39341","refsource":"SECUNIA","url":"http://secunia.com/advisories/39341"},{"name":"39250","refsource":"BID","url":"http://www.securityfocus.com/bid/39250"},{"name":"nextgen-mode-xss(57562)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/57562"},{"name":"http://wordpress.org/extend/plugins/nextgen-gallery/changelog/","refsource":"CONFIRM","url":"http://wordpress.org/extend/plugins/nextgen-gallery/changelog/"},{"name":"http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability","refsource":"MISC","url":"http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability"},{"name":"ADV-2010-0821","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/0821"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-1186","datePublished":"2010-04-07T15:00:00.000Z","dateReserved":"2010-03-30T00:00:00.000Z","dateUpdated":"2024-08-07T01:14:06.658Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-04-07 15:30:00","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"FC676CF4-AF5F-4343-AB43-278262D328D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.33:*:*:*:*:*:*:*","matchCriteriaId":"26E4204A-4BA2-4C33-A710-3CE60D878E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.34:*:*:*:*:*:*:*","matchCriteriaId":"50C0A270-EA27-48BD-8D64-29E828F63ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.35:*:*:*:*:*:*:*","matchCriteriaId":"A5D79D5B-7B3D-4237-8171-46842328C1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.36:*:*:*:*:*:*:*","matchCriteriaId":"EC872D48-CCFD-4875-8AEA-B7A2436577A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.37:*:*:*:*:*:*:*","matchCriteriaId":"40854E84-09A4-4129-A2B0-08DA99E5EF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.39:*:*:*:*:*:*:*","matchCriteriaId":"0E8D4A40-6F78-4E5A-978B-62BA1E55087B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.40:*:*:*:*:*:*:*","matchCriteriaId":"15D03EEA-C197-44FE-A876-658EB96A46F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.41:*:*:*:*:*:*:*","matchCriteriaId":"E4C4D8AF-0FBE-44DC-8A61-4A19309721C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.42:*:*:*:*:*:*:*","matchCriteriaId":"E4E26C7B-D322-4D02-B538-F1A3D66B30BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.43:*:*:*:*:*:*:*","matchCriteriaId":"05AD5D83-6DD5-49C3-BA08-49B08E4E1840"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.50:*:*:*:*:*:*:*","matchCriteriaId":"A051BAEC-92D1-4691-91F8-960650FE3CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.51:*:*:*:*:*:*:*","matchCriteriaId":"43C3D5E4-B66D-4125-B238-B1214E16B98D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.52:*:*:*:*:*:*:*","matchCriteriaId":"BE91517A-34BE-4A5C-A18C-13BE00C41D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.60:*:*:*:*:*:*:*","matchCriteriaId":"57F767DA-EA78-48DE-BD21-B1B83689BEA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.61:*:*:*:*:*:*:*","matchCriteriaId":"0E581082-EF11-487B-B3BC-BBEEEB2D0D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.62:*:*:*:*:*:*:*","matchCriteriaId":"427728C9-A494-4F6B-AEB0-F20891DEF96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.63:*:*:*:*:*:*:*","matchCriteriaId":"3A6111C6-3F0B-43ED-86E7-F1E000EF3DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.64:*:*:*:*:*:*:*","matchCriteriaId":"DB844E83-F5AF-473C-8941-177D29997BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.70:*:*:*:*:*:*:*","matchCriteriaId":"6EB2CA50-8D2F-43FB-B46E-C339CA332876"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.71:*:*:*:*:*:*:*","matchCriteriaId":"206CCC66-F0BE-4DC4-899D-48452E7C7C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.72:*:*:*:*:*:*:*","matchCriteriaId":"6AE16C00-E4EB-4BCE-98C9-53624A6A3C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.73:*:*:*:*:*:*:*","matchCriteriaId":"D290E48B-7373-4B45-9B20-5304BD552849"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.74:*:*:*:*:*:*:*","matchCriteriaId":"D3C18566-A37D-48A3-B8E0-388B73FD02C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.80:*:*:*:*:*:*:*","matchCriteriaId":"C8AB81AC-E5A4-4E19-A496-7465E88460EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.81:*:*:*:*:*:*:*","matchCriteriaId":"E8E94D50-4413-4E88-94AC-983FF664E6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.82:*:*:*:*:*:*:*","matchCriteriaId":"D3CC5B94-A0F7-4CD4-837E-BFD5601415F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.83:*:*:*:*:*:*:*","matchCriteriaId":"D8FA1DD5-DAE2-40B0-B51E-8EEFBC027353"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.90:*:*:*:*:*:*:*","matchCriteriaId":"CB81F577-5B52-4309-A7CE-DB24EDE52B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.91:*:*:*:*:*:*:*","matchCriteriaId":"2DC708AA-C4D5-4DAA-BDFB-66D218C7B832"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.92:*:*:*:*:*:*:*","matchCriteriaId":"935E1759-87D1-4B54-B199-70828CC5474E"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.93:*:*:*:*:*:*:*","matchCriteriaId":"834ECC39-7DA7-48FC-A97C-1B79BC115DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.94:*:*:*:*:*:*:*","matchCriteriaId":"029EE532-F83D-47D5-BDBC-344C74E50989"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.95:*:*:*:*:*:*:*","matchCriteriaId":"5DC41F9F-FD8C-49C4-8F9E-4A772B16353C"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.96:*:*:*:*:*:*:*","matchCriteriaId":"93335231-D342-4982-9180-16DD7CD16BB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.97:*:*:*:*:*:*:*","matchCriteriaId":"D0583B28-FF45-49A5-9A47-FDE636D33BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.98:*:*:*:*:*:*:*","matchCriteriaId":"41A10EE9-C70E-4C67-87CE-040E43046CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.99:*:*:*:*:*:*:*","matchCriteriaId":"915DCA3F-A369-4A89-9EC3-F1F223A60DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"95EA2570-AB2B-4A1B-9091-03258D9EB78B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D47BA512-56AD-455B-99B8-9D8253A01FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E3E9F6C9-5158-4CE5-A930-2A635E1FFA9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B5CA80D7-8822-461F-8591-AD2F67F1AB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B358C25E-09B1-42F6-A73D-D986BD77DAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"390ACD4F-D49A-4639-8CCF-8283F713AEE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C0521D8E-1DB5-4F77-B870-3D1066F31E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4CEFD9EF-C297-40DE-BFA1-980AC200D057"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F9B3E03C-D154-42DD-9E34-24811F36DCB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1CE2C969-7292-41BF-ADA9-94FC07CB6A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"79001D7F-9161-4D17-8F66-875CC5A8D92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"49426249-36EE-4934-B905-201076B04DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"6021988F-6E9C-42C1-BD7C-7B9644DC5E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"699E825C-EEBA-40C2-9608-EEC9A68FEC94"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"C111263F-F2E0-46C2-ABD3-A4DF8AFEB841"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8338802D-4BD8-475D-A495-B1E6A65C8FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E0A49F94-6F4D-4382-AE4A-FE2BE9BD39D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B57D1A5C-A53E-47EF-B229-30B594C550D6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"1186","Ordinal":"1","Title":"CVE-2010-1186","CVE":"CVE-2010-1186","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"1186","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.","Type":"Description","Title":"CVE-2010-1186"},{"CveYear":"2010","CveId":"1186","Ordinal":"2","NoteData":"2010-04-07","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"1186","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}