WordPress plugin Gallery Blocks with Lightbox 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)

Software Continuous Image Carousel With Lightbox Type Plugin Vulnerable versions = 1.0.15 Fixed in 1.0.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28792 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 159303f2d180...

PT-2023-16272 · WordPress · Gallery Blocks With Lightbox

Name of the Vulnerable Software and Affected Versions: The Gallery Blocks with Lightbox WordPress plugin versions prior to 3.0.8 Description: The issue concerns an AJAX endpoint in the plugin that can be accessed by any authenticated user, including those with a subscriber role. This endpoint's...

WordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)

Software Continuous Image Carousel With Lightbox Type Plugin Vulnerable versions = 1.0.15 Fixed in 1.0.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28776 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4f3625a25ed1...

WordPress Meta slider and carousel with lightbox Plugin <= 1.6.2 is vulnerable to Broken Access Control

Software Meta slider and carousel with lightbox Type Plugin Vulnerable versions = 1.6.2 Fixed in 1.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25703 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 31990cdfe1fc Credits Cat...

The vulnerability of the WP Video Lightbox plugin of the WordPress content management system allows attackers to execute cross-site scripting attacks.

The vulnerability of the WP Video Lightbox plugin of the WordPress content management system exists due to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2022-4682

The Lightbox Gallery WordPress plugin before 0.9.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4682

The Lightbox Gallery WordPress plugin before 0.9.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

Cross site scripting

The Lightbox Gallery WordPress plugin before 0.9.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4682

CVE-2022-4682 affects the Lightbox Gallery WordPress plugin prior to 0.9.5. The issue arises because the plugin does not validate and escape certain shortcode attributes before outputting them, allowing a user with the contributor role or higher to perform a Stored Cross-Site Scripting (XSS) atta...

CVE-2022-4682 Lightbox Gallery < 0.9.5 - Contributor+ Stored XSS via Shortcode

The Lightbox Gallery WordPress plugin before 0.9.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

PT-2023-15063 · WordPress · Gallery Lightbox

Name of the Vulnerable Software and Affected Versions: Lightbox Gallery WordPress plugin versions prior to 0.9.5 Description: The issue concerns the Lightbox Gallery WordPress plugin, which does not properly validate and escape certain shortcode attributes. This could allow users with the...

WordPress plugin Lightbox Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

Image Hover Effects for Elementor with Lightbox and Flipbox < 3.0 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress Album and Image Gallery plus Lightbox Plugin <= 1.6.2 is vulnerable to Broken Access Control

Software Album and Image Gallery plus Lightbox Type Plugin Vulnerable versions = 1.6.2 Fixed in 1.6.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25060 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID dd001a553b6f Credits Cat...

WordPress Lightbox Photo Gallery Plugin < 0.9.5 is vulnerable to Cross Site Scripting (XSS)

Software Lightbox Photo Gallery Type Plugin Vulnerable versions 0.9.5 Fixed in 0.9.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4682 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 26f255866ba8 Credits Lana Codes...

Lightbox Gallery < 0.9.5 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC gallery ids='88' class='"...

CVE-2022-4465

The WP Video Lightbox WordPress plugin before 1.9.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

Cross site scripting

The WP Video Lightbox WordPress plugin before 1.9.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4465 WP Video Lightbox < 1.9.7 - Contributor+ Stored XSS

The WP Video Lightbox WordPress plugin before 1.9.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...