Lucene search

K
wpvulndbWpvulndbWPVDB-ID:E2E2C976-6BE6-469B-A9DE-BB3E6140D7FE
HistoryApr 13, 2023 - 12:00 a.m.

FooGallery < 2.2.41 - Reflected XSS

2023-04-1300:00:00
wpscan.com
13
foogallery
plugin
xss
vulnerability
parameter
outputting
page
privilege
admin
software

EPSS

0.002

Percentile

61.3%

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

EPSS

0.002

Percentile

61.3%

Related for WPVDB-ID:E2E2C976-6BE6-469B-A9DE-BB3E6140D7FE