CVE-2025-26742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Gallery for Social Photo feed-instagram-lite allows Stored XSS.This issue affects Gallery for Social Photo: from n/a through = 1.0.0.35...

CVE-2025-26742

CVE-2025-26742 affects Gallery for Social Photo (WordPress plugin). The issue is an Stored Cross-Site Scripting vulnerability caused by improper neutralization of input during web page generation in the plugin, affecting versions from