2 matches found
CVE-2026-14833
The Lightbox with PhotoSwipe WordPress plugin before 5.9.0 does not sanitise or escape a link data attribute before rendering it into the image lightbox caption in the browser, allowing users with author-level access and above who lack the unfilteredhtml capability to store JavaScript that runs...
6.8CVSS0.00431EPSS
SaveExploits0References1
CVE-2026-14833: Improper Neutralization of Input During Web Page Generation
The Lightbox with PhotoSwipe WordPress plugin before 5.9.0 does not sanitise or escape a link data attribute before rendering it into the image lightbox caption in the browser, allowing users with author-level access and above who lack the unfilteredhtml capability to store JavaScript that runs...
6.8CVSS5.8AI score0.00431EPSS
SaveExploits0References2
20