Threats tagged 'ghsa-qjhw-rmf9-g548'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-124649The Lightbox with PhotoSwipe WordPress plugin before 5.19.0 does not properly sanitise link titles and other caption High2026-11-14GCVE DatabaseCVE-2026-124649 The Lightbox with PhotoSwipe WordPress plugin versions prior to 5.19.0 contain a vulnerability where link titles and other caption sources are not properly sanitized before being inserted as HTML into image lightbox captions. This flaw allows unauthenticated users to inject stored cross-site scripting (XSS) payloads via comments. Report on CVE-2026-124649 Vulnerability #ghsa-qjhw-rmf9-g548	GCVE Database	2026-11-14

Page 1 of 1