colorlib fancybox vulnerabilities (CVE)

CVE records published for colorlib fancybox, newest first. Follow to get an email when a new one appears.

1 results

6.1Medium

CVE-2025-3662 1 year ago

FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS

FancyBox for WordPress

The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries' caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated …