CVE-2025-3662

The FancyBox for WordPress plugin, in versions prior to 3.3.6 , is vulnerable to an Unauthenticated Stored XSS vulnerability. The root cause is the failure to properly escape captions and titles attributes before using them to populate gallery caption fields. An attacker can exploit this lack of ...