CVE-2026-81156 — Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings

CVE-2026-81156

Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings PUBLISHED

Description (CNA)

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery for editing.

Affected (CNA)

Vendor / product	Versions
Unknown / Robo Gallery	affected 0 before 5.2.6

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/e8c9aabb-a889-473b-b107-3aafb71a6956/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.