CVE-2026-1706 | All-in-One Video Gallery Plugin up to 4.7.1 on WordPress vi cross site scripting

A vulnerability classified as problematic has been found in All-in-One Video Gallery Plugin up to 4.7.1 on WordPress. Impacted is an unknown function. The manipulation of the argument vi leads to cross site scripting.

This vulnerability is listed as CVE-2026-1706. The attack may be initiated remotely. There is no available exploit.