CVE-2026-66434

The vulnerability affects versions 3.33 and earlier of the Photonic Gallery & Lightbox plugin, which is used for Flickr, SmugMug, and other platforms, allowing for Contributor Cross Site Scripting (XSS) attacks. This could enable an attacker to execute malicious scripts in the context of a user's session, potentially compromising user data and session integrity. Users and administrators of the affected plugin should prioritize patching to mitigate the risk of exploitation.