CVE-2026-65475

The Modula Image Gallery plugin versions 2.14.25 to 2.14.30 are vulnerable to a stored cross-site scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of users accessing the gallery, potentially leading to data theft or session hijacking. Website administrators using affected versions should prioritize patching this vulnerability to protect their users and maintain site integrity.