CVE-2026-3423

Name of the Vulnerable Software and Affected Versions Envira Gallery versions prior to 1.12.5

Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping in the gallery description configuration field. Authenticated attackers with Author-level access or higher can inject arbitrary web scripts into pages. These scripts execute when a user views a page displaying a gallery that has a description enabled.

Recommendations Update to version 1.12.5 or later. As a temporary mitigation, restrict access to the description configuration field for users with Author-level permissions.