5.3
Medium
CVE-2024-43924 Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly…
Description
Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Responsive Lightbox 2.4 | earliest → 2.4.7 | No fix stated |
| responsive_lightbox 2.4 | earliest → 2.4.7 | No fix stated |
Other CVEs of Responsive Lightbox
The 5 CVEs of Responsive Lightbox →
CVE-2026-56041
Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions
7.1
High
CVE-2024-49282
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory…
5.9
Medium
CVE-2024-31252
Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a…
4.3
Medium
CVE-2017-2243
Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject…
Not rated