5.9
Medium
CVE-2023-24004 Auth
Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin <= 2.1.5 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Image and Video Lightbox, Image PopUp 2.1 | earliest → 2.1.5 | No fix stated |