ByteOS Network

CVE Vulnerability Details :

CVE-2026-65519

PUBLISHED

More Info Official Page

Assigner-Patchstack

Assigner Org ID-21595511-bba5-4825-b968-b78d1f9984a3

Published At-23 Jul, 2026 | 11:19

Updated At-23 Jul, 2026 | 11:19

▼CVE Numbering Authority (CNA)

WordPress Photo Gallery plugin <= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions.

Affected Products

Vendor

gt3themes

Product

Photo Gallery

Collection URL

https://wordpress.org/plugins

Package Name

gt3-photo-video-gallery

Default Status

unaffected

Versions

Affected

From n/a through 2.7.7.29 (custom)
- -> unaffectedfrom2.7.7.30

Problem Types

Type	CWE ID	Description
CWE	CWE-79	CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Type: CWE

CWE ID: CWE-79

Description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Metrics

Version	Base score	Base severity	Vector
3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Impacts

CAPEC ID	Description
CAPEC-592	CAPEC-592 Stored XSS

CAPEC ID: CAPEC-592

Description: CAPEC-592 Stored XSS

Solutions

Update the WordPress Photo Gallery Plugin to the latest available version (at least 2.7.7.30).

Credits

finder

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

References

Hyperlink	Resource
https://patchstack.com/database/wordpress/plugin/gt3-photo-video-gallery/vulnerability/wordpress-photo-gallery-plugin-2-7-7-29-cross-site-scripting-xss-vulnerability?_s_id=cve	vdb-entry

Hyperlink: https://patchstack.com/database/wordpress/plugin/gt3-photo-video-gallery/vulnerability/wordpress-photo-gallery-plugin-2-7-7-29-cross-site-scripting-xss-vulnerability?_s_id=cve

Resource:

vdb-entry

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References