First published: Thu Jan 09 2020(Updated: )
The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Fooplugins Foogallery | <=1.8.12 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of the FooGallery plugin for WordPress is CVE-2019-20182.
The severity of CVE-2019-20182 is medium with a severity value of 4.8.
CVE-2019-20182 allows XSS attacks via the post_title parameter of the FooGallery plugin 1.8.12 for WordPress.
The Common Vulnerabilities and Exposures (CVE) ID for the XSS vulnerability in the FooGallery plugin 1.8.12 for WordPress is CVE-2019-20182.
To mitigate the XSS vulnerability in the FooGallery plugin 1.8.12 for WordPress, update to a version that addresses the issue or apply patches provided by the plugin developer.