← All advisories

Medium severity4.8NVD Advisory· Published Jan 9, 2020· Updated Jun 17, 2026

CVE-2019-20182

CVE-2019-20182

Description

The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.

Affected products

3

WordPress/FooGallery plugindescription
Fooplugins/Foogallery
cpe:2.3:a:fooplugins:foogallery:*:*:*:*:*:wordpress:*:*
Range: <=1.8.12
WordPress/Foogalleryllm-fuzzy
Range: = 1.8.12
Package: https://wordpress.org/plugins/foogallery

Patches

Vulnerability mechanics

References

1

medium.com/%40Pablo0xSantiago/cve-2019-20182-foogallery-image-gallery-wordpress-plugin-1-8-12-stored-cross-site-scripting-d5864f1259fnvd

News mentions

0

No linked articles in our index yet.