CVE-2025-3745 — WP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSS
The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to con…
Published: 2025-06-30 · CVSS: 6.3 · CVSS 3.1
The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7