CVE-2022-3987

MEDIO 5.4CVE-2022-3987 · Published 19/12/2022 · updated 17/06/2026

In breve

CVE-2022-3987 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda responsive lightbox2 (noorsplugin).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.50%, superiore al 42.6% delle vulnerabilità.
Correzione: aggiornare a 1.0.4 o successiva.

Package	Affected versions	Patched versions
responsive lightbox2 noorsplugin	`< 1.0.4`	`1.0.4`

Description

The Responsive Lightbox2 WordPress plugin before 1.0.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

References

wpscan.com/vulnerability/d9309a09-34ba-4e56-b683-e677ad277b29 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free