CVE-2026-12982 — Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery

CVE-2026-12982

Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery PUBLISHED

Description (CNA)

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users.

Affected (CNA)

Vendor / product	Versions
Unknown / Document Gallery	affected 0 before 5.1.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/a3c279ce-5db1-4331-ad74-4eef49619737/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.