medium6.3
CVE-2025-3745
The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow mali…
Impact
The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Syedbalkhi | Wp Lightbox 2 | before 3.0.6.8 |