Description
Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WP Chill | Modula Image Gallery | ≤ 2.14.23 | — |
Medium · 6.5
CVE-2026-42688
EUVD-2026-36836GHSA-cq6v-9fx8-4hwq
WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack