FooGallery < 2.3.2 - Extensions Mgt via CSRF

Description The plugin does not have CSRF checks when activating/deactivating and downloading extensions, which could allow attackers to make logged in admins perform such actions via CSRF attacks...