← CVE Intelligence

CVE-2025-3745

WP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSS PUBLISHED

Description (CNA)

The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.

Affected (CNA)

Vendor / productVersions
Unknown / WP Lightbox 2affected 0 before 3.0.6.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.