Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker Contest Gallery… (CVE-2026-111837)

The vulnerability identified as CVE-2026-111837 affects Wasiliy Strecker Contest Gallery through version 34.0.1. It is a stored cross-site scripting (XSS) flaw caused by improper neutralization of input during web page generation. This allows attackers with low privileges and requiring user interaction to execute scripts in the context of the affected application, potentially leading to partial confidentiality, integrity, and availability impacts.

Successful exploitation can lead to partial compromise of confidentiality, integrity, and availability of the affected system due to execution of malicious scripts in users' browsers. The attack requires low complexity and privileges but does require user interaction. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, users should exercise caution with untrusted input and consider applying temporary mitigations such as input validation or output encoding where possible.