Cross-Site Scripting Vulnerability in NextGEN Gallery Search by Koen Schuit

CVE-2025-53224

What is CVE-2025-53224?

The NextGEN Gallery Search plugin developed by Koen Schuit is susceptible to a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of user input during web page generation. This flaw allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to data theft, session hijacking, or other security breaches. It is crucial for users running affected versions from n/a through 2.12 to apply the latest updates or implement mitigation strategies to safeguard their sites.

References