Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:5 a.m.5 views

CVE-2024-1858

The Lightbox slider – Responsive Lightbox Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.9 via deserialization of untrusted input through post meta data. This makes it possible for authenticated attackers, with contributor-level access...

5.4CVSS7.1AI score0.00224EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/17 7:16 p.m.17 views

CVE-2024-49280 WordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Weblizar Lightbox slider – Responsive Lightbox Gallery allows Stored XSS.This issue affects Lightbox slider – Responsive Lightbox Gallery: from n/a through 1.10.0...

6.5CVSS6.8AI score0.00285EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/17 7:16 p.m.20 views

CVE-2024-49280 WordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weblizar - WordPress Themes & Plugin Lightbox slider – Responsive Lightbox Gallery simple-lightbox-gallery allows Stored XSS.This issue affects Lightbox slider – Responsive Lightbox Gallery: from n...

6.5CVSS0.00285EPSS
Exploits0References1
CVE
CVE
added 2024/10/17 7:16 p.m.37 views

CVE-2024-49280

CVE-2024-49280 concerns the WordPress plugin “Lightbox slider – Responsive Lightbox Gallery.” The vulnerability is a stored XSS arising from improper neutralization of input during web page generation, enabling stored cross-site scripting in affected pages. The entry states the issue affects vers...

6.5CVSS5.2AI score0.00285EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/17 12:0 a.m.1 views

WordPress plugin Lightbox slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

6.5CVSS6AI score0.00285EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/17 12:0 a.m.2 views

PT-2024-33420 · Weblizar · Weblizar Lightbox Slider – Responsive Lightbox Gallery

Name of the Vulnerable Software and Affected Versions: Weblizar Lightbox slider – Responsive Lightbox Gallery versions 1.10.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Store...

6.5CVSS5.6AI score0.00285EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/10/15 12:0 a.m.9 views

WordPress Lightbox slider – Responsive Lightbox Gallery Plugin <= 1.10.1 is vulnerable to Cross Site Scripting (XSS)

Software Lightbox slider – Responsive Lightbox Gallery Type Plugin Vulnerable versions = 1.10.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49280 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b212a4266d36 Credits Robert...

6.5CVSS6.5AI score0.00285EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/29 9:6 a.m.2 views

WordPress Lightbox slider – Responsive Lightbox Gallery plugin <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Lightbox slider – Responsive Lightbox Gallery versions = 1.9.9...

5.4CVSS8.8AI score0.00224EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/03/29 7:15 a.m.13 views

CVE-2024-1858

The Lightbox slider – Responsive Lightbox Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.9 via deserialization of untrusted input through post meta data. This makes it possible for authenticated attackers, with contributor-level access...

5.4CVSS5.7AI score0.00224EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/03/29 6:43 a.m.20 views

CVE-2024-1858 Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection

The Lightbox slider – Responsive Lightbox Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.9 via deserialization of untrusted input through post meta data. This makes it possible for authenticated attackers, with contributor-level access...

5.4CVSS6AI score0.00224EPSS
Exploits0References2
CVE
CVE
added 2024/03/29 6:43 a.m.47 views

CVE-2024-1858

CVE-2024-1858 is a vulnerability in the Lightbox slider – Responsive Lightbox Gallery WordPress plugin, affecting versions up to 1.9.9. The issue is PHP Object Injection via deserialization of untrusted input in post meta data. Exploitation is possible by attackers with contributor-level access o...

5.4CVSS9.3AI score0.00224EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/29 6:43 a.m.11 views

CVE-2024-1858 Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection

The Lightbox slider – Responsive Lightbox Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.9 via deserialization of untrusted input through post meta data. This makes it possible for authenticated attackers, with contributor-level access...

5.4CVSS7.4AI score0.00224EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.9 views

WordPress Lightbox slider – Responsive Lightbox Gallery Plugin <= 1.9.9 is vulnerable to PHP Object Injection

Software Lightbox slider – Responsive Lightbox Gallery Type Plugin Vulnerable versions = 1.9.9 Fixed in 1.10.0 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-1858 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID c570605cfccd Credits...

5.4CVSS6.8AI score0.00224EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/03/29 12:0 a.m.3 views

WordPress Plugin Lightbox slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS8.4AI score0.00224EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/03/28 12:0 a.m.3 views

PT-2024-18367 · WordPress · The Lightbox Slider – Responsive Lightbox Gallery

Name of the Vulnerable Software and Affected Versions: The Lightbox slider – Responsive Lightbox Gallery plugin for WordPress versions up to, and including, 1.9.9 Description: The issue is related to PHP Object Injection via deserialization of untrusted input through post meta data. This allows...

5.4CVSS9.7AI score0.00224EPSS
Exploits0References6
Rows per page
Query Builder