Skip to content
Sign in
5.9 Medium

CVE-2026-25362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FooPlugins…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FooPlugins FooGallery foogallery allows Stored XSS.This issue affects FooGallery: from n/a through <= 3.1.11.

Affected products and versions

Product Affected versions Fixed in
FooGallery 3.1 earliest → 3.1.11 No fix stated

Other CVEs of FooGallery

The 4 CVEs of FooGallery →
CVE-2026-25363 Missing Authorization vulnerability in FooPlugins FooGallery foogallery allows Exploiting Incorrectly Configured… 4.3 Medium CVE-2023-44244 Unauth 7.1 High CVE-2023-29439 Unauth 7.1 High
Track this CVE