Medium · 6.5 CVE-2024-49280 EUVD-2024-43346GHSA-7f3m-28f6-g433

WordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.6 - Cross Site Scripting (XSS) vulnerability

Published Oct 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Weblizar – WordPress Themes & Plugin Product: Lightbox slider – Responsive Lightbox Gallery

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weblizar - WordPress Themes & Plugin Lightbox slider – Responsive Lightbox Gallery simple-lightbox-gallery allows Stored XSS.This issue affects Lightbox slider – Responsive Lightbox Gallery: from n/a through <= 1.10.6.

Affected products

Vendor	Product	Affected	Fixed
Weblizar - WordPress Themes & Plugin	Lightbox slider – Responsive Lightbox Gallery	≤ 1.10.6	—

References

https://patchstack.com/database/Wordpress/Plugin/simple-lightbox-gallery/vulnerability/wordpress-lightbox-slider-responsive-lightbox-gallery-plugin-1-10-0-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry