CVE-2006-3026: Clicktech Clickgallery

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in gallery.asp and (2) parentcurrentpage parameter in view_gallery.asp.

Affected products

• Clicktech Clickgallery: up to and including 5.0

Published 2006-06-15. Last modified 2026-06-16.