Unrated severityNVD Advisory· Published Oct 18, 2026
CVE-2026-110981
CVE-2026-110981
Description
The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyone who follows a crafted gallery link and clicks the breadcrumb, including a logged-in administrator.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <9.2.11.002
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.