6.3
Moyenne
CVE-2025-3745 The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of…
Description
The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Lightbox 2 3.0 | premières → < 3.0.6.8 | 3.0.6.8 |