https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:21:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-238942 EUVD-2026-238942 https://cve.radiocsirt.org/vuln/euvd-2026-238942 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3597 <p>The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free version too, making it theoretically exploitable there as well.</p> <p>The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free version too, making it theoretically exploitable there as well.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-3597 https://cve.radiocsirt.org/vuln/ghsa-hhrx-pjm2-54m9 <p>The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free version too, making it theoretically exploitable there as well.</p> <p>The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free version too, making it theoretically exploitable there as well.</p> https://cve.radiocsirt.org/vuln/ghsa-hhrx-pjm2-54m9