Glightbox
1 CVEs
product
Monthly
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GLightbox allows Cross-Site Scripting (XSS).This issue affects GLightbox: from 0.0.0 before 1.0.16.
XSS
Glightbox
Drupal
NVD
CVSS 3.1
6.1
EPSS
0.0%
CVE-2025-48922
EPSS 0%
CVSS 6.1
MEDIUM
PATCH
This Month
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GLightbox allows Cross-Site Scripting (XSS).This issue affects GLightbox: from 0.0.0 before 1.0.16.
XSS
Glightbox
Drupal
NVD