CVE-2026-97260 Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions

Description

Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
MaxGalleria 6.5	earliest → 6.5.3	No fix stated

Other CVEs of MaxGalleria

The 3 CVEs of MaxGalleria →

CVE-2024-5970 The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallery_thumb… 6.4 Medium CVE-2024-3581 The MaxGalleria plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the… 4.3 Medium