55 matches found
CVE-2026-107323
The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing...
EUVD-2026-96128
The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing...
CVE-2026-107323
The Gallery PhotoBlocks WordPress plugin versions before 1.3.6 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape specific gallery settings before they are rendered into an HTML attribute. This allows users with Contributor-level acc...
CVE-2026-107323 Gallery PhotoBlocks 1.3.5 - Contributor+ Stored XSS
The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing...
CVE-2026-107323: Improper Neutralization of Input During Web Page Generation
The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing...
CVE-2026-84781
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...
EUVD-2026-69921
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...
CVE-2026-84781
CVE-2026-84781 is a Contributor-level Cross Site Scripting (XSS) vulnerability in the WordPress Gallery PhotoBlocks plugin, affecting versions ≤ 1.3.4 . The flaw was discovered by V1T via Patchstack. An attacker with at least Contributor privileges can inject malicious scripts that execute in ano...
CVE-2026-84781 WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...
CVE-2026-84781 WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...
WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Gallery PhotoBlocks versions = 1.3.4...
PT-2026-84705
Name of the Vulnerable Software and Affected Versions Gallery PhotoBlocks versions prior to 1.3.5 Description Cross Site Scripting XSS allows an attacker with contributor privileges to execute malicious scripts in the browser of other users. Recommendations Update Gallery PhotoBlocks to version...
CVE-2026-84781: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...
CVE-2026-66448
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.3 versions...
CVE-2026-66448 WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.3 versions...
CVE-2026-66448
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.3 versions...
EUVD-2026-49248
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.3 versions...
CVE-2026-66448 WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.3 versions...
WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Muhammad Sharief in WordPress Plugin Gallery PhotoBlocks versions = 1.3.3...