CVE-2026-66448

Gallery PhotoBlocks versions up to 1.3.3 are vulnerable to a Contributor Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts through user-generated content. This could lead to unauthorized access to sensitive information or manipulation of user sessions. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.