CVE-2026-65519

MediumCVSS 6.5

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Summary

The Photo Gallery plugin versions up to 2.7.7.29 contain a Cross Site Scripting (XSS) vulnerability exploitable by authors. An author can inject malicious JavaScript code.

Risk Assessment

The risk includes session theft, redirection to malicious sites, or theft of data from visitors of the affected page.

Recommendation

Update the Photo Gallery plugin to the latest version and restrict author permissions.

Other vulnerabilities in Photo Gallery

CVE-2014-9312High
CVE-2014-9312 is a vulnerability related to unrestricted file upload in Photo Gallery version 1.2.5. This allows attackers to upload malicious files to the server.

Original NVD description (English source)

Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS