EUVD-2024-44887

Malicious code in bioql PyPI...

CVE-2025-52707

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through = 2.3.16...

CVE-2025-52707

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through = 2.3.16...

CVE-2025-52707

CVE-2025-52707 : Firelight Lightbox (WordPress plugin) is affected by a Stored Cross-Site Scripting (XSS) vulnerability in versions up to 2.3.16 due to improper input neutralization during web page generation. The CVSSv3.1 base score is 6.5 (Medium): impact to confidentiality, integrity, and avai...

CVE-2024-50460

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through = 2.3.3...

CVE-2024-50460

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through = 2.3.3...

CVE-2024-50460

CVE-2024-50460 describes a Stored XSS in the Firelight Lightbox WordPress plugin (≤ 2.3.3). The vulnerability arises from improper neutralization of input during web page generation, enabling attacker-supplied input to be stored and served to users. Public references cite CVSS scores around 4.8–5...