← Database

CVE-2025-3745

MEDIUM CVSS: 6.3 Published: 2025-06-30 Modified: 2026-06-17

Description

The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.

Affected Platforms

Syedbalkhi Wp Lightbox 2

Weakness Type

CWE-79

References