6.5
Medium
CVE-2026-24389 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through <= 1.3.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gallery PhotoBlocks 1.3 | earliest → 1.3.2 | No fix stated |
Other CVEs of Gallery PhotoBlocks
The 6 CVEs of Gallery PhotoBlocks →
CVE-2026-116408
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery…
6.5
Medium
CVE-2026-114710
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery…
6.5
Medium
CVE-2026-84781
Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions
6.5
Medium
CVE-2026-66448
Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions
6.5
Medium