CVE-2026-78238: Medium severity vulnerability
Published Aug 28, 2026
·Updated
SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.
Event History
Aug 28, 2026
CVE Published
via MITRE·06:11 AM
Data Sourced
via MITRE·06:11 AM
DescriptionSeverity
Frequently Asked Questions
1
What does an attacker need to exploit this vulnerability?
The attacker needs at least low-level privileges and requires user interaction. Exploitation results in arbitrary script execution in the browser of a user logging in to the product.
2
Who is affected by successful exploitation?
A user who logs in to the product may have arbitrary script executed in their web browser. The vulnerability can affect confidentiality and integrity, while no availability impact is indicated.