FooPlugins Gallery : FooGallery

• CVE-2026-85414 Medium 6.4 Gallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute 0.4%