Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 16:49:26 +0000 CVE-2026-107323 — Gallery PhotoBlocks 1.3.5 - Contributor+ Stored XSS https://cve.radiocsirt.org/vuln/cve-2026-107323 <p><strong>Affected:</strong> Unknown Gallery PhotoBlocks</p> <p>The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing the gallery, including administrators.</p> <p><strong>Affected:</strong> Unknown Gallery PhotoBlocks</p> <p>The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing the gallery, including administrators.</p> https://cve.radiocsirt.org/vuln/cve-2026-107323