CVE-2026-97290

The vulnerability allows unauthenticated Cross Site Scripting (XSS) attacks in versions 3.36 and earlier of Photonic Gallery & Lightbox, impacting users of platforms like Flickr and SmugMug. Successful exploitation could enable attackers to execute arbitrary scripts in the context of the user's session, potentially leading to data theft or account compromise. Organizations using these versions should prioritize remediation to protect their users from potential exploitation.