EUVD-2025-19255

Malicious code in bioql PyPI...

EUVD-2025-28450

Malicious code in bioql PyPI...

EUVD-2025-14273

Malicious code in bioql PyPI...

EUVD-2024-44887

Malicious code in bioql PyPI...

CVE-2025-5035

The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title attributes before outputting them in the page, which could allow users with a role as low as contributors to perform stored Cross-Site Scripting attacks...

CVE-2025-5035

The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title attributes before outputting them in the page, which could allow users with a role as low as contributors to perform stored Cross-Site Scripting attacks...

CVE-2025-5035 Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS

The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title attributes before outputting them in the page, which could allow users with a role as low as contributors to perform stored Cross-Site Scripting attacks...

CVE-2025-5035

CVE-2025-5035 concerns the WordPress plugin Firelight Lightbox. Public records show it could allow stored XSS by outputting unescaped title attributes, affecting users with as little as Contributor privileges. Public data confirms the issue existed in Firelight Lightbox versions prior to 2.3.16 a...

CVE-2025-5035 Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS

The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title attributes before outputting them in the page, which could allow users with a role as low as contributors to perform stored Cross-Site Scripting attacks...

WordPress plugin Firelight Lightbox 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-27051 · WordPress · Firelight Lightbox

Name of the Vulnerable Software and Affected Versions: Firelight Lightbox WordPress plugin versions prior to 2.3.16 Description: The issue concerns the Firelight Lightbox WordPress plugin, which does not properly sanitise and escape title attributes before displaying them on the page. This could...

CVE-2025-52707

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through = 2.3.16...

CVE-2025-52707

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through = 2.3.16...

CVE-2025-52707 WordPress Firelight Lightbox plugin <= 2.3.16 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through = 2.3.16...

CVE-2025-52707 WordPress Firelight Lightbox plugin <= 2.3.16 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through = 2.3.16...

PT-2025-26403 · Unknown · Firelight Lightbox

Name of the Vulnerable Software and Affected Versions: Firelight Lightbox versions through 2.3.16 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means an attacker can inject malicious scripts into the...

WordPress plugin Firelight Lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress Firelight Lightbox plugin <= 2.3.16 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy in WordPress Plugin Firelight Lightbox versions = 2.3.16...

CVE-2024-50460

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through = 2.3.3...

WordPress Firelight Lightbox plugin < 2.3.15 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin Firelight Lightbox versions 2.3.15...