{"id":"CVE-2026-74921","published":"2026-10-19T07:16:31.613","lastModified":"2026-10-19T21:02:51.987","description":"The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when a higher privileged user views the content.","cvssScore":6.8,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/b0b97661-c671-420c-8fca-22666862b379/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}