cleantalk
Vulnerabilities and Security Researches

Responsive Lightbox & Gallery, CVE-2025-9710

CVE, Research URL

CVE-2025-9710

Published on
Oct 06, 2025
Research Description
The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks.
Affected versions
max 2.5.3.
Status
vulnerable