CVE-2026-81156

6.8 Moyenne

Publiée le 11/10/2026 à 09:17 · Modifiée le 13/10/2026 à 22:36 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery for editing.

Traduire en français

Produits concernés

Unknown Robo Gallery

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.8 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-79

Références

https://wpscan.com/vulnerability/e8c9aabb-a889-473b-b107-3aafb71a6956/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories