Normally I’m happy to announce that NextGEN gallery reached 4 million downloads, but due to a security fixes I need to advice that everybody should update to the latest release 1.8.4. If you whatever reason prefer not to update the plugin, I suggest to download the file tags.php and overwrite this file in your nextgen-gallery/admin [...]
Tag Archive for 'security'
New bugfix release
25Mar10In this minutes I’ve uploaded a new bugfix release NextGEN Gallery Version 1.5.2 . There is one XSS bug fixed in the media-rss script and I also solved a issue with old shortcodes. I encouraged everybody to update to the latest version, or if you on whatever reason stay would stay at your version, please update the file media-rss.php from [...]
Security issue or not ?
18Jun08Before to many people starts writing that there is a security problem, I would like to give my statement . In the current version of NextGEN Gallery it’s possible to include javascript commands inside the description field (So called XSS vulnerability) as long as the user has admin access to the blog . It was [...]
Recent Comments