Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-111837 EUVD-2026-107276GHSA-gwfv-3fg6-68gx

WordPress Contest Gallery plugin <= 34.0.1 - Cross Site Scripting (XSS) vulnerability

Published Oct 21, 2026 · Updated Oct 21, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through 34.0.1.

Affected products

VendorProductAffectedFixed
Wasiliy Strecker Contest Gallery ≤ 34.0.1 —

References