CVE-2026-38465

GazellePW (GazellePosterWall), a PHP-based poster wall application, is affected by a Stored XSS in the donor avatar mouse-over text feature. The avatar_mouse_over_text parameter is stored and subsequently rendered in an avatar tooltip without sufficient output encoding, allowing remote authentica...