Lucene search
+L

877 matches found

Vulnrichment
Vulnrichment
•added 2025/04/04 3:58 p.m.•9 views

CVE-2025-32176 WordPress Gallery Blocks with Lightbox plugin <= 3.2.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GalleryCreator Gallery Blocks with Lightbox allows Stored XSS.This issue affects Gallery Blocks with Lightbox: from n/a through 3.2.5...

6.5CVSS6.7AI score0.00399EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:58 p.m.•27 views

CVE-2025-32176 WordPress Gallery Blocks with Lightbox plugin <= 3.2.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GalleryCreator SimpLy Gallery simply-gallery-block allows Stored XSS.This issue affects SimpLy Gallery: from n/a through = 3.2.5...

6.5CVSS0.00399EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/04 1:21 p.m.•18 views

WordPress Lightbox & Modal Popup WordPress Plugin – FooBox plugin <= 2.7.33 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Robert DeVore in WordPress Plugin FooBox Image Lightbox versions = 2.7.33...

5.9CVSS7AI score0.00276EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•12 views

WordPress plugin Gallery Blocks with Lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6.7AI score0.00399EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•1 views

PT-2025-14959

Name of the Vulnerable Software and Affected Versions Gallery Blocks with Lightbox versions 3.2.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject malicious...

6.5CVSS0.00399EPSS
SaveExploits0References6
NVD
NVD
•added 2025/03/26 3:16 p.m.•14 views

CVE-2025-23704

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Reuven Karasik Your Lightbox your-lightbox allows Reflected XSS.This issue affects Your Lightbox: from n/a through = 1.0...

7.1CVSS0.00385EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/03/26 3:16 p.m.•8 views

CVE-2025-23704

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Reuven Karasik Your Lightbox your-lightbox allows Reflected XSS.This issue affects Your Lightbox: from n/a through = 1.0...

7.1CVSS7.2AI score0.00385EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/26 2:24 p.m.•62 views

CVE-2025-23704

CVE-2025-23704 is a reflected XSS in the WordPress plugin Your Lightbox (versions up to 1.0). The issue stems from improper input neutralization during web page generation and affects Your Lightbox: from n/a through 1.0. Affected product: Your Lightbox. Root cause and affected scope are stated in...

7.1CVSS7.2AI score0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/26 2:24 p.m.•24 views

CVE-2025-23704 WordPress Your Lightbox plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Reuven Karasik Your Lightbox your-lightbox allows Reflected XSS.This issue affects Your Lightbox: from n/a through = 1.0...

7.1CVSS0.00385EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/26 12:00 a.m.•12 views

WordPress plugin Your Lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8.2AI score0.00385EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•3 views

PT-2025-12903

Name of the Vulnerable Software and Affected Versions Reuven Karasik Your Lightbox versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in Reuven Karasik Your...

7.1CVSS0.00385EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•5 views

CVE-2025-23704: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Reuven Karasik Your Lightbox your-lightbox allows Reflected XSS.This issue affects Your Lightbox: from n/a through = 1.0...

7.1CVSS5.8AI score0.00385EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/19 12:54 p.m.•13 views

WordPress Your Lightbox plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Your Lightbox versions = 1.0...

7.1CVSS7.6AI score0.00385EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/03/05 12:00 a.m.•19 views

WordPress plugin Responsive Lightbox & Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8.3AI score0.00331EPSS
SaveExploits0References4
NVD
NVD
•added 2025/01/15 4:15 p.m.•40 views

CVE-2025-22797

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oğulcan Özügenç Gallery and Lightbox gallery-and-lightbox allows Stored XSS.This issue affects Gallery and Lightbox: from n/a through = 1.0.14...

6.5CVSS0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/15 3:23 p.m.•51 views

CVE-2025-22797 WordPress Gallery and Lightbox plugin <= 1.0.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oğulcan Özügenç Gallery and Lightbox gallery-and-lightbox allows Stored XSS.This issue affects Gallery and Lightbox: from n/a through = 1.0.14...

6.5CVSS0.00227EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/15 3:23 p.m.•76 views

CVE-2025-22797

CVE-2025-22797 is a stored XSS in the Gallery and Lightbox WordPress plugin. The Red Hat and Wordfence entries identify it as an authenticated, stored Cross-Site Scripting vulnerability affecting Gallery and Lightbox versions up to 1.0.14. The connected documents do not provide a vendor patch or ...

6.5CVSS7.2AI score0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/15 3:23 p.m.•15 views

CVE-2025-22797 WordPress Gallery and Lightbox plugin <= 1.0.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oğulcan Özügenç Gallery and Lightbox allows Stored XSS.This issue affects Gallery and Lightbox: from n/a through 1.0.14...

6.5CVSS6.6AI score0.00227EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/15 12:00 a.m.•22 views

PT-2025-4706 · Unknown · Oğulcan Özüğenc Gallery/Lightbox

Name of the Vulnerable Software and Affected Versions: Oğulcan Özügenç Gallery and Lightbox versions 1.0.14 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS, which allows stored XSS attacks...

6.5CVSS8.8AI score0.00227EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/15 12:00 a.m.•2 views

CVE-2025-22797: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oğulcan Özügenç Gallery and Lightbox gallery-and-lightbox allows Stored XSS.This issue affects Gallery and Lightbox: from n/a through = 1.0.14...

6.5CVSS5.8AI score0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder