11 matches found
CVE-2026-97290
Unauthenticated Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.36 versions...
CVE-2026-97290 WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.36 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.36 versions...
EUVD-2026-90217
Unauthenticated Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.36 versions...
CVE-2026-97290
The Photonic Gallery & Lightbox for Flickr, SmugMug & Others WordPress plugin, in versions
CVE-2026-97290 WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.36 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.36 versions...
WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.36 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Photonic Gallery & Lightbox for Flickr, SmugMug & Others versions = 3.36...
PT-2026-103506
Unauthenticated Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.36 versions...
CVE-2026-97290: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.36 versions...
EUVD-2026-49243
Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...
CVE-2026-66434: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...
CVE-2025-12691: Improper Neutralization of Input During Web Page Generation
The Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's lightbox functionality in all versions up to, and including, 3.21 due to insufficient input sanitization and output escaping on user supplied caption...