Skip to content
OpenAdvisories
High · 7.1 CVE-2023-32797 EUVD-2023-37018GHSA-r4ff-p99m-q3hr

WordPress video carousel slider with lightbox Plugin <= 1.0.22 is vulnerable to Cross Site Scripting (XSS)

Published Aug 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution video carousel slider with lightbox plugin <= 1.0.22 versions.

Affected products

VendorProductAffectedFixed
I Thirteen Web Solution video carousel slider with lightbox ≤ 1.0.22 —

References