PT-2025-40854 · WordPress · Responsive Lightbox & Gallery
CVSS v3.1
6.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Responsive Lightbox & Gallery WordPress plugin versions prior to 2.5.3
Description
The software does not properly handle HTML tag attribute modifications, which could allow unauthenticated attackers to include event handlers and conduct Stored Cross-Site Scripting (XSS) attacks. The issue allows abuse of the functionality through modifications to HTML tag attributes.
Recommendations
Update to version 2.5.3 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Responsive Lightbox & Gallery