FooGallery
cpe:2.3:a:fooplugins:foogallery:*:*:*:*:wordpress:*:*
- 2.4.29
A reflected cross-site scripting vulnerability has been identified in FooGallery version 2.4.29. The issue arises because the application dynamically generates web content without properly validating the source of potentially untrusted data, specifically in the file 'myapp/extensions/albums/admin/class-meta boxes.php'.
Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.