cleantalk
Vulnerabilities and Security Researches

Best WordPress Gallery Plugin – FooGallery, 297228e3-729b-487c-8cf5-2fc7548ea840

Published on
-
Research Description
Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery &amp; Carousel [foogallery] < 1.9.25 FooGallery &lt; 1.9.25 - Authenticated Cross-Site Scripting (XSS) The FooGallery WordPress plugin was found to be vulnerable to Authenticated Cross-Site Scripting (XSS). &quot;The vulnerability is caused by improper sanitization of user input in the image title or caption parameters in the gallery media upload editor. Thereby it can lead to an XSS in the default lightbox feature.&quot;
Affected versions
max 1.9.25.
Status
vulnerable