CVE-2026-105887: WordPress Robo Gallery plugin <= 5.1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robosoft Robo Gallery robo-gallery allows Stored XSS.This issue affects Robo Gallery: from n/a through 5.1.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Robo Gallery (robo-gallery)to a version that resolves this vulnerability.Fixed in 5.2.6
Event History
Frequently Asked Questions
Which installations should be considered affected?
Robo Gallery versions through 5.1.6 are affected. The affected version range begins at an unspecified earlier version.
What access and conditions are required for exploitation?
The CVSS vector indicates exploitation is possible over the network with low privileges and low attack complexity. It also requires user interaction.
What is the potential impact if exploitation succeeds?
The issue is rated medium with a CVSS score of 6.5. It may have low confidentiality, integrity, and availability impact, and the CVSS vector indicates the impact can extend beyond the vulnerable component.