CVE-2022-25603: Maxfoundry Maxgalleria

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5).

Affected products

• Maxfoundry Maxgalleria: version 6.2.5 only

Published 2022-03-18. Last modified 2026-06-17.