CVE:CVE-2010-1186
CNNVD:CNNVD-201004-111
WordPress是一款免费的论坛Blog系统，wp-Table和wordTube都是其中常用的插件。
WordPress的NextGEN Gallery插件中的脚本xml/media-rss.php存在跨站脚本攻击漏洞。远程攻击者可以借助mode参数注入任意的web脚本和HTML。
solution:Upgrade alex_rabe nextgen_gallery to a higher version than 1.5.1,0.33,0.34,0.35,0.36,0.37,0.39,0.40,0.41,0.42,0.43,0.50,0.51,0.52,0.60,0.61,0.62,0.63,0.64,0.70,0.71,0.72,0.73,0.74,0.80,0.81,0.82,0.83,0.90,0.91,0.92,0.93,0.94,0.95,0.96,0.97,0.98,0.99,1.0.0,1.0.1,1.0.2,1.1.0,1.2.0,1.2.1,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.5,1.3.6,1.4.0,1.4.1,1.4.2,1.4.3,1.5.0,and avoid the version (,1.5.1],0.33,0.34,0.35,0.36,0.37,0.39,0.40,0.41,0.42,0.43,0.50,0.51,0.52,0.60,0.61,0.62,0.63,0.64,0.70,0.71,0.72,0.73,0.74,0.80,0.81,0.82,0.83,0.90,0.91,0.92,0.93,0.94,0.95,0.96,0.97,0.98,0.99,1.0.0,1.0.1,1.0.2,1.1.0,1.2.0,1.2.1,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.5,1.3.6,1.4.0,1.4.1,1.4.2,1.4.3,1.5.0