Логотип exploitDog
bind:CVE-2025-3742
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-3742

Количество 2

Количество 2

nvd логотип

CVE-2025-3742

9 месяцев назад

The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

CVSS3: 6.8
EPSS: Низкий
github логотип

GHSA-m4qv-7jq9-f554

9 месяцев назад

The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

CVSS3: 6.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-3742

The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

CVSS3: 6.8
0%
Низкий
9 месяцев назад
github логотип
GHSA-m4qv-7jq9-f554

The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

CVSS3: 6.8
0%
Низкий
9 месяцев назад

Уязвимостей на страницу