CVE-2026-107178

The Image Photo Gallery Final Tiles Grid WordPress plugin, versions prior to 3.6.16 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to escape gallery lightbox configuration values before they are printed into an inline script on pages embedding the gallery. Th...