Responsive Lightbox Security Vulnerabilities and Issues — Responsive Lightbox CVE List

Lucene search

DfactoryResponsive Lightbox

4 matches found

CVE•added 2024/06/09 12:15 p.m.•79 views

CVE-2024-31252

Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6.

8.8CVSS5AI score0.00303EPSS

CVE•added 2024/10/23 8:15 a.m.•40 views

CVE-2024-43924

Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7.

9.8CVSS6.4AI score0.00319EPSS

CVE•added 2024/10/17 8:15 p.m.•37 views

CVE-2024-49282

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in dFactory Responsive Lightbox allows Stored XSS.This issue affects Responsive Lightbox: from n/a through 2.4.8.

5.9CVSS6.1AI score0.00058EPSS

CVE•added 2024/08/22 10:15 a.m.•33 views

CVE-2024-6870

The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping affecting the rl_upload_image AJAX endpoint. This makes it possible for authent...

6.4CVSS5.9AI score0.00058EPSS