CVE-2026-28141

NextGEN Gallery versions up to 4.2.3 are vulnerable to an unauthenticated Cross Site Scripting (XSS) flaw, allowing attackers to inject malicious scripts into web pages viewed by users. This can lead to session hijacking, data theft, or defacement of the site. Website administrators using affected versions should prioritize applying patches to mitigate potential exploitation risks.