TI-2026-04534 CVE-2026-5191 · GHSA-4fmw-78mr-6v5j
Cross-site scripting in raja3c Tiled Gallery Carousel Without JetPack
Priority LOW 23
The Tiled Gallery Carousel Without JetPack plugin for WordPress is vulnerable to stored cross-site scripting via the 'data-image-title' parameter in all versions up to, and including, 3.1 due to insufficient input saniti…