6.5
Medium
CVE-2026-116408 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through 1.3.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gallery PhotoBlocks 1.3 | earliest → 1.3.7 | No fix stated |
Other CVEs of Gallery PhotoBlocks
The 6 CVEs of Gallery PhotoBlocks →
CVE-2026-114710
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery…
6.5
Medium
CVE-2026-84781
Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions
6.5
Medium
CVE-2026-66448
Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions
6.5
Medium
CVE-2026-24389
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery…
6.5
Medium