CVE-2026-24628 Supsystic CVE debrief

Who should care

Defenders responsible for WordPress installations with the Photo Gallery by Supsystic plugin should assess exposure and prioritize patching or mitigation to prevent potential XSS attacks.

Why it matters

Defenders should prioritize verifying exposure and applying patches or mitigations to prevent potential XSS attacks in WordPress installations with the Photo Gallery by Supsystic plugin.

• Potential for unauthorized script injection by administrators
• Possible impact on data integrity and confidentiality
• Need for verification of exposure and patch application
• Potential for exploitation attempts targeting unpatched installations

Technical summary

The vulnerability exists in the Photo Gallery by Supsystic plugin, affecting versions up to 1.16.3. An administrator can exploit this vulnerability to inject malicious scripts, potentially leading to unauthorized actions or data exposure.

Defensive priority

Defenders should prioritize verifying exposure and applying patches or mitigations to prevent potential XSS attacks.

Recommended defensive actions

• Verify exposure of Photo Gallery by Supsystic plugin versions up to 1.16.3
• Apply patches or mitigations to prevent potential XSS attacks
• Monitor for potential exploitation attempts

Evidence notes

The vulnerability is described as a Cross Site Scripting (XSS) issue in the Photo Gallery by Supsystic plugin, affecting versions up to 1.16.3. The CVSS score is 5.9, indicating a medium severity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.