Description
Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wasiliy Strecker | Contest Gallery | ≤ 28.1.6 | — |
Medium · 6.5
CVE-2026-42656
EUVD-2026-36821GHSA-x3gw-fxqf-c5pw
WordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack