CVE-2021-24357

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p48

Published

Jun 14, 2021 (Jun 14, 2021)

Modified

Jun 17, 2026

Description

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue.

Vendors: fooplugins
Products: foogallery
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.