Skip to content
Sign in
6.5 Medium

CVE-2025-26742 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Gallery…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Gallery for Social Photo feed-instagram-lite allows Stored XSS.This issue affects Gallery for Social Photo: from n/a through <= 1.0.0.35.

Affected products and versions

Product Affected versions Fixed in
Gallery for Social Photo 1.0 earliest → 1.0.0.35 No fix stated

Other CVEs of Gallery for Social Photo

The 2 CVEs of Gallery for Social Photo →
CVE-2022-2224 The WordPress plugin Gallery for Social Photo is vulnerable to Cross-Site Request Forgery in versions up to, and… 5.4 Medium
Track this CVE