PT-2023-29168 · Fooplugins · Foogallery

Name of the Vulnerable Software and Affected Versions: FooPlugins FooGallery plugin versions = 2.2.44 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing the...

WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)

Software FooGallery Type Plugin Vulnerable versions = 2.2.44 Fixed in 2.3.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44233 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 27eb9518b12d Credits RE-ALTER Required...

WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)

Software FooGallery Type Plugin Vulnerable versions = 2.2.44 Fixed in 2.3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-44244 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b438ec1253ca Credits RE-ALTER Required privilege...

WordPress FooGallery Plugin < 2.2.44 is vulnerable to Cross Site Scripting (XSS)

Software FooGallery Type Plugin Vulnerable versions 2.2.44 Fixed in 2.2.44 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8f1d9323b03f Credits Rafie Muhammad Patchstack Required...

WordPress FooGallery Plugin < 2.0.35 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:fooplugins:foogallery"; if description...

WordPress FooGallery Plugin < 2.2.41 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:fooplugins:foogallery"; if description...

CVE-2023-29439

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FooPlugins FooGallery plugin = 2.2.35 versions...

CVE-2023-29439

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FooPlugins FooGallery plugin = 2.2.35 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FooPlugins FooGallery plugin = 2.2.35 versions...

CVE-2023-29439

CVE-2023-29439 is a reflected XSS in the WordPress plugin FooGallery (versions

CVE-2023-29439 WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FooPlugins FooGallery plugin = 2.2.35 versions...

CVE-2023-29439 WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FooPlugins FooGallery plugin = 2.2.35 versions...

FooGallery < 2.2.41 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)

Software FooGallery Type Plugin Vulnerable versions = 2.2.35 Fixed in 2.2.41 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29439 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6955856030c5 Credits LOURCODE Required...

PT-2023-6703 · WordPress · Foogallery

Name of the Vulnerable Software and Affected Versions: FooGallery plugin versions = 2.2.35 Description: The issue exists due to insufficient protection of the web page structure in the foogallery image editor modal function of the FooGallery plugin for WordPress. This allows a remote attacker to...

WordPress FooGallery plugin <= 2.1.33 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress FooGallery plugin versions = 2.1.33. Solution Update the WordPress FooGallery plugin to the latest available version at least 2.1.34...

WordPress FooGallery plugin <= 2.1.33 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress FooGallery plugin versions = 2.1.33. Solution Update the WordPress FooGallery plugin to the latest available version at least 2.1.34...

CVE-2021-24357

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue...

CVE-2021-24357

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue...

CVE-2021-24357 FooGallery < 2.0.35 - Authenticated Stored Cross-Site Scripting

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue...