Threats tagged 'ghsa-335m-jcx3-h636'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118165The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic High2026-10-30GCVE DatabaseCVE-2026-118165 The Firelight Lightbox WordPress plugin versions prior to 2.3.23 do not properly escape URLs in links opened by its Classic lightbox feature. This vulnerability allows users with Contributor-level permissions to inject stored cross-site scripting (XSS) payloads that execute when other users click crafted links. Report on CVE-2026-118165 Vulnerability #ghsa-335m-jcx3-h636	GCVE Database	2026-10-30

Page 1 of 1