CVE-2026-81155 — Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label

CVE-2026-81155

Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label PUBLISHED

Description (CNA)

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, including administrators.

Affected (CNA)

Vendor / product	Versions
Unknown / Robo Gallery	affected 0 before 5.2.6

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/e6b574c6-1999-4318-a9aa-9529aeceeb8b/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.