CVE-2026-84781

Gallery PhotoBlocks versions up to 1.3.4 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by other users. This vulnerability poses a medium risk, as it can lead to unauthorized actions on behalf of users or data theft. Organizations using affected versions should prioritize remediation to protect their web applications and user data from potential exploitation.