Advisories · Technology

fooplugins Gallery : FooGallery.

Every CVE that names fooplugins Gallery : FooGallery among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85414 CVE record

CVSS 6.4 Medium

Gallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute
- fooplugins Gallery : FooGallery
- Cross-site scripting (XSS)
Not analysed yet 5 Sept 2026