Best WordPress Gallery Plugin – FooGallery, CVE-2024-2762
- CVE, Research URL
- Application
- Published on
- Jun 13, 2024
- Research Description
- The FooGallery WordPress plugin before 2.4.15, foogallery-premium WordPress plugin before 2.4.15 does not validate and escape some of its Gallery settings before outputting them back in the page, which could allow users with a role as low as Author to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin
- Affected versions
-
Min -, max 2.4.15.
- Status
-
vulnerable