CVE-2026-8867

Name of the Vulnerable Software and Affected Versions Post Category Gallery versions prior to 1.0.1

Description Stored Cross-Site Scripting occurs via the 'postcategorygallery' shortcode. The issue stems from insufficient input sanitization and output escaping within the sc horcatbar() function. Specifically, user-supplied shortcode attributes such as total width, color scheme, and caption font size are concatenated directly into HTML attribute values. This allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts into pages, which execute when a user visits the affected page.

Recommendations Update to a version later than 1.0.0. As a temporary mitigation, restrict the use of the postcategorygallery shortcode and its attributes total width, color scheme, and caption font size for users with contributor-level access.