Gallery Custom Links <= 2.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Author Display Name + Comment HTML Comment Body

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-107757 · Microsoft / collected KEV context

cve-program · CVE-2026-107757

• https://www.wordfence.com/threat-intel/vulnerabilities/id/f37a0db8-b13c-4d9f-bc6f-88576f9e3862?source=cve
• https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L502
• https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L2112
• https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L2207
• https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/classes/core.php#L215
• https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/classes/core.php#L103
• https://plugins.trac.wordpress.org/changeset/3737485/gallery-custom-links
• https://plugins.trac.wordpress.org/changeset/3737485/gallery-custom-links/trunk/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php

No related operational record is retained in the current change model.