CVE-2023-45747

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Syed Balkhi WP Lightbox 2 plugin = 3.0.6.5 versions...

CVE-2023-45747

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Syed Balkhi WP Lightbox 2 plugin = 3.0.6.5 versions...

CVE-2023-45747

CVE-2023-45747 affects WordPress plugin WP Lightbox 2. Versions 3.0.6.5 and earlier are vulnerable to an authenticated (admin+) Stored XSS via plugin settings. Root cause: input handling in the plugin settings allows storing malicious payloads that execute in the admin context. Impact per sources...

CVE-2023-45747 WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Syed Balkhi WP Lightbox 2 plugin = 3.0.6.5 versions...

WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS)

Software WP Lightbox 2 Type Plugin Vulnerable versions = 3.0.6.5 Fixed in 3.0.6.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45747 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ca09e79d583e Credits Rio Darmawan Required...