What is CVE-2020-35942?

CVE-2020-35942 is a high-severity vulnerability in Imagely Nextgen_gallery, classified under Cross-site Scripting. CVSS score: 8.8/10. Published 2021-02-09.

How severe is CVE-2020-35942?

High severity. CVSS v3 base score is 8.8 out of 10.

Is CVE-2020-35942 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Imagely Nextgen_gallery

CVE-2020-35942

A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via settings modification, leading to Remote Code Execution and XSS. (It is possible to bypass C…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.014 (68.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Imagely Nextgen_gallery
N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-35942?: CVE-2020-35942 is a high-severity vulnerability in Imagely Nextgen_gallery, classified under Cross-site Scripting. CVSS score: 8.8/10. Published 2021-02-09.
How severe is CVE-2020-35942?: High severity. CVSS v3 base score is 8.8 out of 10.
Is CVE-2020-35942 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.