CVE-2025-22624: FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry and Carousel 2.4.29 - Reflected cross-site scripting (XSS)
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry and Carousel 2.4.29 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/extensions/albums/admin/class-meta boxes.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22624?
CVE-2025-22624 is categorized as a critical vulnerability due to improper validation of dynamically generated web content.
How do I fix CVE-2025-22624?
To fix CVE-2025-22624, you should update to the latest version of FooGallery that addresses this vulnerability.
What type of attack can leverage CVE-2025-22624?
CVE-2025-22624 could be exploited for cross-site scripting (XSS) attacks due to the lack of validation on untrusted data.
Which versions of FooGallery are affected by CVE-2025-22624?
CVE-2025-22624 affects FooGallery version 2.4.29 and possibly earlier versions.
Is there a known exploit for CVE-2025-22624?
As of now, there is no public information on specific exploits for CVE-2025-22624.