6.8
Moyenne
CVE-2026-81156 The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before…
Description
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery for editing.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Robo Gallery 5.2 | premières → < 5.2.6 | 5.2.6 |
Autres CVE de Robo Gallery
Les 4 CVE de Robo Gallery →
CVE-2026-81155
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a…
6.8
Moyenne
CVE-2026-81154
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in…
6.8
Moyenne
CVE-2026-81153
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before…
6.8
Moyenne