CVE-2026-84930

CVE-2026-84930 affects the CatFolders Document Gallery & PDF Library WordPress plugin in versions prior to 2.0.7 . The root cause is improper validation of the titleTag block attribute before it is used as an HTML tag name in the plugin's gallery output, enabling a stored XSS attack. Users with t...