CVE-2026-116563 | NextGEN Gallery Plugin up to 4.5.4 on WordPress Output Escaping comment cross site scripting

October 31, 2026 Yanac

A vulnerability was found in NextGEN Gallery Plugin up to 4.5.4 on WordPress. It has been rated as problematic. This impacts an unknown function of the component Output Escaping. Performing a manipulation of the argument Comment results in cross site scripting.

This vulnerability is identified as CVE-2026-116563. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More