CVE-2026-56041 Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions.

Affected products and versions

Product	Affected versions	Fixed in
Responsive Lightbox 2.7	earliest → 2.7.6	No fix stated

Other CVEs of Responsive Lightbox

The 5 CVEs of Responsive Lightbox →

CVE-2024-43924 Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly… 5.3 Medium CVE-2024-49282 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory… 5.9 Medium CVE-2024-31252 Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a… 4.3 Medium CVE-2017-2243 Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject… Not rated