Photonic Gallery Lightbox For Flickr Smugmug Others
Monthly
Stored cross-site scripting in the Photonic Gallery & Lightbox plugin for WordPress allows authenticated attackers with Contributor-level privileges to inject arbitrary web scripts. When an administrator or other higher-privilege user views a crafted gallery or album configuration, the malicious script executes in their browser, potentially leading to session hijacking or account takeover. This affects all versions up to and including 3.33.
Stored cross-site scripting in the Photonic Gallery & Lightbox plugin for WordPress allows authenticated attackers with Contributor-level privileges to inject arbitrary web scripts. When an administrator or other higher-privilege user views a crafted gallery or album configuration, the malicious script executes in their browser, potentially leading to session hijacking or account takeover. This affects all versions up to and including 3.33.