7.1
Élevée
CVE-2026-74920 The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting…
Description
The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visitor, including a logged-in administrator.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Document Gallery 5.1 | premières → 5.1.1 | Pas de correctif indiqué |
Autres CVE de Document Gallery
Les 5 CVE de Document Gallery →
CVE-2026-74922
The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated…
5.3
Moyenne
CVE-2026-74921
The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes…
6.8
Moyenne
CVE-2026-74923
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a…
5.3
Moyenne
CVE-2026-12982
The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it…
6.1
Moyenne