MEDIUM
Hossni Mubarak
CVE published 2026-10-13
CVE-2026-108487
A Cross Site Scripting (XSS) vulnerability exists in the WordPress Books Gallery plugin versions up to 4.8.4. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. The vulnerability, identified as CVE-2026-108487, is a result of improper neutralization of input during web page generation. Defenders and administrators using the Books Gallery plugin in [truncated]