CVE-2026-104653

The Envira Gallery WordPress plugin versions before 1.16.1 is vulnerable to Stored XSS . The root cause is the failure to sanitize or escape user-supplied gallery display configuration values before they are stored and subsequently output within an image tag attribute . This allows users with the...