FooBox Image Lightbox WordPress Plugin Cross-Site Scripting Vulnerability
Vulnerability
A cross-site scripting (XSS) vulnerability exists in the FooBox Image Lightbox WordPress plugin, specifically in versions through 2.7.33. This issue allows attackers to inject malicious scripts, such as redirects or advertisements, into the website, which would be executed when visitors access the site.
Impact
Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user's browser.
Remediation
Users of the FooBox Image Lightbox WordPress plugin should update to version 2.7.34 or later to address this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
5.2remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.