Description
Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| dFactory | Responsive Lightbox | ≤ 2.7.6 | — |
High · 7.1
CVE-2026-56041
EUVD-2026-39703GHSA-q229-6rqj-ph5c
WordPress Responsive Lightbox plugin <= 2.7.6 - Cross Site Scripting (XSS) vulnerability
Published Jun 26, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack