Skip to content
Sign in
7.1 High

CVE-2026-24949 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe photome allows DOM-Based XSS.This issue affects PhotoMe: from n/a through <= 5.7.1.

Affected products and versions

Product Affected versions Fixed in
PhotoMe 5.7 earliest → 5.7.1 No fix stated

Other CVEs of PhotoMe

The 3 CVEs of PhotoMe →
CVE-2025-69301 Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects… 9.8 Critical CVE-2026-24381 Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods PhotoMe photome allows Server Side Request Forgery.This… 5.4 Medium
Track this CVE