CVE-2026-107178

The Image Photo Gallery Final Tiles Grid WordPress plugin versions prior to 3.6.16 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to escape gallery lightbox configuration values (specifically via the 'lightboxOptions' parameter) before they are printed in...