Input validation vulnerability in FooGallery Premium 2.3.3

FooGallery, a WordPress plugin, is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.3.3. This means that anyone with contributor or higher access to the WordPress website can inject malicious code into pages, which will be run whenever someone views the page. This code can be used to damage the website, or to steal user information.

Detected in:

Best WordPress Gallery Plugin – FooGallery fixed vulnerable versions: >= * <= 2.4.8
FooGallery Premium fixed vulnerable versions: >= * <= 2.3.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.