CVE-2008-2526: Cross-site scripting (XSS) vulnerability in the WT Gallery (aka wt_gallery) extension 2.6.2 and earlier for...

Security readout for executives and security teams

CVE-2008-2526 is an old cross-site scripting issue in the WT Gallery TYPO3 extension, version 2.6.2 and earlier. A remote attacker could inject script or HTML through unspecified inputs. The sources do not show active exploitation, CVSS scoring, or detailed exploit vectors. Exposure is likely limited to legacy TYPO3 deployments that still have the WT Gallery, also named wt_gallery, extension installed at version 2.6.2 or earlier. Organizations without TYPO3 or this extension are not indicated as affected by the provided sources. This should be handled as legacy web-application risk. It is not currently evidenced as actively exploited, but any exposed obsolete TYPO3 extension can create customer-facing compromise risk. Prioritize if the extension is internet-facing or still used on production sites. Mitigation focus: Inventory TYPO3 sites for the WT Gallery or wt_gallery extension.; Check whether installed versions are 2.6.2 or earlier.; Review the TYPO3 security bulletin and extension guidance for the supported fix..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.