CVE:CVE-2008-7175
CNNVD:CNNVD-200909-083
Wordpress NextGEN Gallery plugin 0.96及之前版本中的wp-admin/admin.php存在跨站脚本攻击漏洞。远程攻击者可以借助页编辑操作中的图片描述字段，注入任意的web脚本或HTML。
solution:Upgrade alex_rabe nextgen_gallery to a higher version than 0.96,0.33,0.34,0.35,0.36,0.37,0.39,0.40,0.41,0.42,0.43,0.50,0.51,0.52,0.60,0.61,0.62,0.63,0.64,0.70,0.71,0.72,0.73,0.74,0.80,0.81,0.82,0.83,0.90,0.91,0.92,0.93,0.94,0.95,and avoid the version (,0.96],0.33,0.34,0.35,0.36,0.37,0.39,0.40,0.41,0.42,0.43,0.50,0.51,0.52,0.60,0.61,0.62,0.63,0.64,0.70,0.71,0.72,0.73,0.74,0.80,0.81,0.82,0.83,0.90,0.91,0.92,0.93,0.94,0.95