Sign in

6.5 Medium

CVE-2026-66448 Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions

Description

Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
Gallery PhotoBlocks 1.3	earliest → 1.3.3	No fix stated

The 6 CVEs of Gallery PhotoBlocks →

CVE-2026-116408 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery… 6.5 Medium CVE-2026-114710 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery… 6.5 Medium CVE-2026-84781 Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions 6.5 Medium CVE-2026-24389 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery… 6.5 Medium

Do you use Gallery PhotoBlocks?

Track this CVE Watch Gallery PhotoBlocks Check my SBOMs

www.cveye.io/en/cve/CVE-2026-66448

Timeline

Published July 27, 2026
Last modified July 27, 2026

References

patchstack.com patchstack.com

Track this CVE