What is GHSA-pgp8-c2p2-rr7f?

GHSA-pgp8-c2p2-rr7f is a security advisory published by GitHub Security Advisories with unknown severity. The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery...

Which CVE IDs does GHSA-pgp8-c2p2-rr7f cover?

GHSA-pgp8-c2p2-rr7f covers the following CVE IDs: CVE-2026-107178. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-pgp8-c2p2-rr7funknown

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery...

Vendor

GitHub Security Advisories

Published

October 14, 2026

Last Modified

October 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-107178 →

📋 Description

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes in the browser of anyone who views the gallery, including administrators.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-107178
https://wpscan.com/vulnerability/ecc86d5a-7a2f-479e-b5f9-cf86f14fc404
https://github.com/advisories/GHSA-pgp8-c2p2-rr7f