Drupal Lightgallery Cross-site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Lightgallery allows Cross-Site Scripting XSS. This issue affects Lightgallery: from 0.0.0 before 1.6.0...

CVE-2025-48447

The Drupal Lightgallery component is vulnerable to a Cross-site Scripting (XSS) flaw due to Improper Neutralization of Input During Web Page Generation . This issue affects versions 0.0.0 through 1.6.0 . An attacker could potentially execute malicious scripts in the context of the user's browser....