PT-2026-3965 · Lambertgroup · Lambertgroup Image&Video Fullscreen Background
CVE-2025-47666
·
Publicado
2026-01-22
·
Atualizado
2026-01-25
CVSS v3.1
7.1
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
LambertGroup Image&Video FullScreen Background versions through 1.6.7
Description
The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting (XSS). This means that malicious scripts can be injected into web pages, potentially compromising user data or system security. The vulnerability exists due to insufficient sanitization of user-supplied input when generating web pages. The affected component is not specified.
Recommendations
Update LambertGroup Image&Video FullScreen Background to a version later than 1.6.7.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Lambertgroup Image&Video Fullscreen Background