Threats tagged 'ghsa-c46c-7597-355p'

The Photonic Gallery & Lightbox for Flickr, SmugMug & Others WordPress plugin contains a stored cross-site scripting (XSS) vulnerability in its lightbox functionality. This vulnerability affects all versions up to and including 3.21. It arises from insufficient input sanitization and output escaping of the user-supplied caption attribute. Authenticated users with contributor-level access or higher can exploit this flaw to inject arbitrary scripts that execute when other users view the affected pages.