CVE-2026-24628

The Photo Gallery by Supsystic versions up to 1.16.3 are vulnerable to a Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts that can be executed in the context of an administrator's session. This vulnerability could lead to unauthorized actions being performed on behalf of the administrator, potentially compromising the integrity of the application. Website administrators using affected versions should prioritize applying updates to mitigate this risk.