Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-50460 EUVD-2024-44887GHSA-7m46-88q5-mp7g

WordPress Firelight Lightbox plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Published Oct 28, 2024 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Firelight Lightbox easy-fancybox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through <= 2.3.3.

Affected products

VendorProductAffectedFixed
Firelight Firelight Lightbox ≤ 2.3.3 —

References