6.3
Medium
CVE-2025-9710 The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes…
Description
The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Responsive Lightbox & Gallery 2.5 | earliest → < 2.5.3 | 2.5.3 |
Other CVEs of Responsive Lightbox & Gallery
The 4 CVEs of Responsive Lightbox & Gallery →
CVE-2025-15386
The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack…
8.8
High
CVE-2025-5093
The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and…
5.4
Medium
CVE-2025-3742
The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes…
6.8
Medium