CVE-2015-9229: Imagely NextGen Gallery

Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days.

In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the images[1][alttext] parameter.

Affected products

• Imagely NextGen Gallery: version 2.1.15 only

Published 2017-09-12. Last modified 2026-06-17.