medium4.8
CVE-2019-20182
The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.
Impact
The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fooplugins | Foogallery | through 1.8.12 |
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/%40Pablo0xSantiago/cve-2019-20182-foogallery-image-gallery-wordpress-plugin-1-8-12-stored-cross-site-scripting-d5864f1259f
- https://medium.com/%40Pablo0xSantiago/cve-2019-20182-foogallery-image-gallery-wordpress-plugin-1-8-12-stored-cross-site-scripting-d5864f1259f