5.9
Moyenne
CVE-2024-49282 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory Responsive Lightbox responsive-lightbox allows Stored XSS.This issue affects Responsive Lightbox: from n/a through <= 2.4.8.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Responsive Lightbox 2.4 | premières → 2.4.8 | Pas de correctif indiqué |
Autres CVE de Responsive Lightbox
Les 5 CVE de Responsive Lightbox →
CVE-2026-56041
Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions
7.1
Élevée
CVE-2024-43924
Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly…
5.3
Moyenne
CVE-2024-31252
Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a…
4.3
Moyenne
CVE-2017-2243
Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject…
Non notée