Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-3065

Malware in sbrugna...

4.3CVSS6.4AI score0.01171EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-46647

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.0034EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/05/12 1:26 p.m.8 views

WordPress LightPress Lightbox plugin < 2.3.4 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin WP jQuery Lightbox versions 2.3.4...

6.8CVSS7.4AI score0.00372EPSS
Exploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/06/07 4:15 a.m.1 views

CVE-2024-5425

The WP jQuery Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ attribute in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS6.1AI score0.0034EPSS
Exploits0References6
OSV
OSV
added 2024/06/07 4:15 a.m.1 views

CVE-2024-5425

The WP jQuery Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ attribute in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

5.4CVSS5.9AI score0.0034EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/06/07 2:3 a.m.3 views

WordPress WP jQuery Lightbox plugin <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via title Attribute vulnerability discovered by Webbernaut in WordPress Plugin WP jQuery Lightbox versions = 1.5.4...

6.4CVSS5.8AI score0.0034EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/06/07 12:0 a.m.2 views

WordPress plugin WP jQuery Lightbox security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS6.8AI score0.0034EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/06/06 12:0 a.m.1 views

PT-2024-36129 · WordPress · Wp Jquery Lightbox

Name of the Vulnerable Software and Affected Versions: WP jQuery Lightbox plugin for WordPress versions up to, and including, 1.5.4 Description: The issue is related to Stored Cross-Site Scripting via the title attribute due to insufficient input sanitization and output escaping. This allows...

6.4CVSS5.8AI score0.0034EPSS
Exploits0References10
Drupal
Drupal
added 2015/10/07 12:0 a.m.18 views

Colorbox - Access bypass - Less Critical - SA-CONTRIB-2015-156

This module allows for integration of Colorbox, a jQuery lightbox plugin, into Drupal. The module allows unprivileged users to add unexpected content to a Colorbox, including content from external sites. This allows an unprivileged user to deface a site. This vulnerability is mitigated by the fac...

3.5CVSS6.2AI score0.00866EPSS
Exploits0References10
Rows per page
Query Builder