CVE-2022-3987

The CVE-2022-3987 entry concerns the WordPress plugin Responsive Lightbox2 prior to 1.0.4. Affected component: shortcode attributes in Lightbox2 output. Root cause: lack of validation/escaping of certain shortcode attributes, enabling Stored XSS by low-privilege users (as low as contributor). Imp...