MEDIUM 6.8 NVD

CVE-2026-81154

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users w

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected gallery, including administrators.

References

https://wpscan.com/vulnerability/c41c6bdc-a877-4012-9398-0fcdcc55c5a9/

Published: 2026-10-11 · Source: NVD · Feed updated: 2026-10-12

This medium severity vulnerability with a CVSS score of 6.8 was published on 2026-10-11 via NVD.

vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.