CVE-2015-9537: XSS in NextGEN Gallery Plugin