Lightbox Block
Monthly
Stored cross-site scripting in the bPlugins LightBox Block WordPress plugin affects all versions through 1.2.0 and lets a low-privilege authenticated user (per the CVSS vector's PR:L) store script that runs when another user - typically an administrator - loads the affected page (UI:R). Rated CVSS 6.5 with scope change (S:C), it is a moderate, not emergency, priority under a this_month decision label, and no public exploit was identified at time of analysis.
Stored cross-site scripting in the bPlugins LightBox Block WordPress plugin affects all versions through 1.2.0 and lets a low-privilege authenticated user (per the CVSS vector's PR:L) store script that runs when another user - typically an administrator - loads the affected page (UI:R). Rated CVSS 6.5 with scope change (S:C), it is a moderate, not emergency, priority under a this_month decision label, and no public exploit was identified at time of analysis.