Threats tagged 'ghsa-wm86-p7cw-7wvq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118438The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before High2026-10-31GCVE DatabaseCVE-2026-118438 The Firelight Lightbox WordPress plugin versions before 2.3.24 improperly escape image attribute values, allowing users with contributor-level access or higher to inject arbitrary web scripts. These scripts execute when other users view or preview the affected content, leading to a cross-site scripting (XSS) vulnerability. Report on CVE-2026-118438 Vulnerability #ghsa-wm86-p7cw-7wvq	GCVE Database	2026-10-31

Page 1 of 1