CVE-2026-81155
6.8 MEDIUMPublished 2026-10-11 · Updated 2026-10-13
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, including administrators.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-79
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2016-20098PoC
- MEDIUMCVE-2023-54408PoC
- UNSCOREDCVE-2023-5648
- MEDIUMCVE-2024-31027
- MEDIUMCVE-2024-34321
- MEDIUMCVE-2024-58391PoC
- MEDIUMCVE-2025-12828
- MEDIUMCVE-2025-13533PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.