High · 7.1 CVE-2026-97290 EUVD-2026-90217GHSA-q26r-p9cq-x7r9

WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.36 - Cross Site Scripting (XSS) vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Description

Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.36 versions.

Vendor	Product	Affected	Fixed
Sayontan Sinha	Photonic Gallery & Lightbox for Flickr, SmugMug & Others	≤ 3.36	—