PT-2026-49082 · WordPress · Foogallery
CVSS v3.1
6.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
FooGallery versions prior to 3.1.32
Description
The FooGallery plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs because the
foogallery sanitize javascript() function uses an incomplete blacklist for JavaScript event handlers, blocking only a specific subset (onmouseover, onmouseout, onpointerenter, onclick, onload, onchange, onerror) while allowing others like onmouseenter. Additionally, the foogallery build container attributes safe() function fails to escape the attribute key when constructing the gallery container HTML. Authenticated attackers with contributor-level access or higher can exploit the custom attribute key shortcode parameter to inject arbitrary web scripts that execute when a user visits the affected page.Recommendations
Update to a version later than 3.1.31.
As a temporary workaround, restrict the use of the
custom attribute key shortcode parameter by users with contributor-level access.Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Foogallery