{
 "id": "WPSEC-2026-1269",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1269/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1269/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1269/index.md",
 "title": "Contest Gallery <= 34.0.1 - Unauthenticated Stored Cross-Site Scripting via Gallery Entry Attachment Title and Caption",
 "description": "The Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via gallery entry attachment fields (title, caption/excerpt, description and the additional-files data) in all versions up to, and including, 34.0.1, due to insufficient output escaping when these values are printed into single-quoted HTML attributes of the backend gallery entries view. This makes it possible for unauthenticated attackers, where a gallery's upload form accepts submissions from visitors, to inject arbitrary web scripts (for example through the title or caption metadata embedded in an uploaded image) that execute when an administrator views the gallery entries in the admin area.",
 "plugin": {
  "slug": "contest-gallery",
  "name": "Contest Gallery",
  "full_name": "Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe",
  "wordpress_org": "https://wordpress.org/plugins/contest-gallery/",
  "advisories_url": "https://wpsec.com/vuln/plugin/contest-gallery/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/contest-gallery"
 },
 "type": "XSS",
 "cwe": [
  "CWE-79"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 7.2,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
  "severity": "High"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "34.0.2",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 34.0.2"
  ]
 },
 "introduced_in": null,
 "fixed_in": "34.0.2",
 "remediation": "Update to 34.0.2 or later.",
 "fix_released": "2026-10-18T20:32:51+00:00",
 "published": "2026-10-20T10:08:26+00:00",
 "updated": "2026-10-20T09:12:58.213883+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1269/",
  "https://plugins.svn.wordpress.org/contest-gallery/tags/34.0.2/",
  "https://wordpress.org/plugins/contest-gallery/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/contest-gallery",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "None seen",
  "as_of": "2026-10-20"
 }
}