Threats tagged 'ghsa-9v8v-v93j-cwvg'

CVE-2026-28141 is a high-severity unauthenticated cross-site scripting (XSS) vulnerability affecting NextGEN Gallery versions up to and including 4.2.3. This vulnerability allows an attacker to inject malicious scripts during web page generation, potentially impacting confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.