PT-2019-7661

Name of the Vulnerable Software and Affected Versions Lightbox Plus Colorbox plugin versions prior to 2.8 Description The issue concerns cross-site request forgery CSRF that can lead to resultant width XSS. This occurs via the "wp-admin/admin.php?page=lightboxplus" API endpoint. Recommendations F...

CVE-2016-10865: Cross-Site Request Forgery (CSRF)

The Lightbox Plus Colorbox plugin through 2.7.2 for WordPress has cross-site request forgery CSRF via wp-admin/admin.php?page=lightboxplus, as demonstrated by resultant width XSS...