Advisories · Technology

Firelight Lightbox.

Every CVE that names Firelight Lightbox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118438 CVE record

CVSS 6.8 Medium

Firelight Lightbox < 2.3.24 - Contributor+ Stored XSS via Image 'src' Attribute
- Firelight Lightbox
- Cross-site scripting (XSS)
Not analysed yet 31 Oct 2026
CVE-2026-118165 CVE record

CVSS 6.8 Medium

Firelight Lightbox < 2.3.23 - Contributor+ Stored XSS via Lightbox Link 'href' Attribute
- Firelight Lightbox
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2025-5035 CVE record

CVSS 5.4 Medium

Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS
- Firelight Lightbox
Not analysed yet 27 Jun 2025
CVE-2025-52707 CVE record

CVSS 6.5 Medium

WordPress Firelight Lightbox plugin <= 2.3.16 - Cross Site Scripting (XSS) Vulnerability
- Firelight Lightbox
- Cross-site scripting (XSS)
Not analysed yet 20 Jun 2025
CVE-2025-3597 CVE record

CVSS 5.9 Medium

Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS
- Firelight Lightbox
Not analysed yet 12 May 2025
CVE-2024-50460 CVE record

CVSS 5.9 Medium

WordPress Firelight Lightbox plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
- Firelight Lightbox
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024