CVE-2026-119175 | gijo Flying Images Plugin up to 2.4.15 on WordPress Comment comment cross site scripting (EUVD-2026-118568)

November 7, 2026 Yanac

A vulnerability identified as problematic has been detected in gijo Flying Images Plugin up to 2.4.15 on WordPress. This affects an unknown part of the component Comment Handler. The manipulation of the argument Comment leads to cross site scripting.

This vulnerability is listed as CVE-2026-119175. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More