Skip to content
Sign in
6.5 Medium

CVE-2025-52707 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through <= 2.3.16.

Affected products and versions

Product Affected versions Fixed in
Firelight Lightbox 2.3 earliest → 2.3.16 No fix stated
Firelight Lightbox 2.3 earliest → 2.3.16 No fix stated

Other CVEs of Firelight Lightbox

The 4 CVEs of Firelight Lightbox →
CVE-2026-6454 The Firelight Lightbox plugin for WordPress is vulnerable to Stored DOM Cross-Site Scripting in versions up to and… 6.4 Medium CVE-2024-5020 Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox… 6.4 Medium CVE-2024-50460 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight… 5.9 Medium
Track this CVE