CVE-2026-102399

MediumCVSS 5.4

Published: 30/09/2026(UTC)Updated: 30/09/2026(UTC)Translated: 30/09/2026(UTC)NVD NIST

Summary

Unauthenticated Cross Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic versions up to 1.21.0. Allows an attacker to perform unauthorized actions on behalf of a logged-in user.

Risk Assessment

CSRF attack can lead to unauthorized changes in gallery configuration, data deletion, or other harmful actions.

Recommendation

Update the Photo Gallery by Supsystic plugin to the latest patched version.

Other vulnerabilities in Photo Gallery by Supsystic

CVE-2026-24628Medium
The Photo Gallery by Supsystic plugin versions up to 1.16.3 contain a Cross-Site Scripting (XSS) vulnerability, allowing administrators to inject malicious scripts into pages.

Original NVD description (English source)

Unauthenticated Cross Site Request Forgery (CSRF) in Photo Gallery by Supsystic <= 1.21.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS