CVE-2025-58784

CVE-2025-58784 affects the WordPress plugin ARI Fancy Lightbox. It is a Stored XSS due to improper input neutralization during web page generation, affecting ARI Fancy Lightbox versions through 1.4.0. The issue can store attacker-controlled input that is later reflected in pages. Remediation: upd...

PT-2024-32522 · Unknown · Ari Fancy Lightbox

Name of the Vulnerable Software and Affected Versions: ARI Fancy Lightbox versions 1.3.17 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...