{"id":"CVE-2026-81155","published":"2026-10-11T07:17:24.387","lastModified":"2026-10-13T20:36:00.850","description":"The Robo Gallery  WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, including administrators.","cvssScore":6.8,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/e6b574c6-1999-4318-a9aa-9529aeceeb8b/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}