Lucene search

CVE-2024-5425

🗓️ 07 Jun 2024 04:32:15Reported by WordfenceType

Vulnerability in WP jQuery Lightbox plugin for WordPress

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2024-5425 WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute	7 Jun 202403:21	–	cvelist
WPVulnDB	WP jQuery Lightbox < 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute	6 Jun 202400:00	–	wpvulndb
NVD	CVE-2024-5425	7 Jun 202404:15	–	nvd
Vulnrichment	CVE-2024-5425 WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute	7 Jun 202403:21	–	vulnrichment
Patchstack	WordPress WP jQuery Lightbox Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)	7 Jun 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 3, 2024 to June 9, 2024)	13 Jun 202415:35	–	wordfence

Nvd

Vulners

Node

lightpress lightboxRange<1.5.5wordpress

[
  {
    "vendor": "pandaboxwp",
    "product": "WP jQuery Lightbox",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.5.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
github	www.github.com/lokesh/lightbox2/blob/dev/src/js/lightbox.js
plugins	www.plugins.trac.wordpress.org/browser/wp-jquery-lightbox/trunk/jquery.lightbox.js
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b3439710-1159-4677-93c9-14bacfbf0b55
plugins	www.plugins.trac.wordpress.org/changeset/3097604/
wordpress	www.wordpress.org/plugins/wp-jquery-lightbox/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Jun 2024 04:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS35.4 - 6.4

EPSS0.001

SSVC

CWE-79