Security Advisory

CVE-2025-5035

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-06-27 06:00:03

Last updated 2025-06-27 14:31:50

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title attributes before outputting them in the page, which could allow users with a role as low as contributors to perform stored Cross-Site Scripting attacks.

← Browse all CVEs View on cve.org ↗