Skip to content
OpenAdvisories

Vendor

raja3c

1 known vulnerabilities.

Products

Tiled Gallery Carousel Without JetPack 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-5191

    Tiled Gallery Carousel Without JetPack <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-title'

    The Tiled Gallery Carousel Without JetPack plugin for WordPress is vulnerable to stored cross-site scripting via the 'data-image-title' parameter in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes …

    raja3c Tiled Gallery Carousel Without JetPack Web / CMS