CVE-2026-15452 | Smash Balloon Social Photo Feed Plugin up to 6.11.3 on WordPress REQUEST_URI cross site scripting

A vulnerability classified as problematic has been found in Smash Balloon Social Photo Feed Plugin up to 6.11.3 on WordPress. This vulnerability affects unknown code. The manipulation of the argument REQUEST_URI leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-15452. The attack is possible to be carried out remotely. No exploit exists.