6.3
Moyenne
CVE-2025-9710 The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes…
Description
The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Responsive Lightbox & Gallery 2.5 | premières → < 2.5.3 | 2.5.3 |
Autres CVE de Responsive Lightbox & Gallery
Les 4 CVE de Responsive Lightbox & Gallery →
CVE-2025-15386
The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack…
8.8
Élevée
CVE-2025-5093
The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and…
5.4
Moyenne
CVE-2025-3742
The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes…
6.8
Moyenne