WP Lightbox 2 WordPress Plugin Unauthenticated Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the WP Lightbox 2 WordPress plugin, affecting versions prior to 3.0.6.8. The issue arises because the plugin fails to properly sanitize the title attribute of links before displaying them, potentially allowing malicious users to execute XSS attacks.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected malicious scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, activate the WP Lightbox 2 plugin and ensure that comments are open to visitors. Post a comment containing a link with a crafted title attribute that includes JavaScript, such as an image tag with an 'onerror' event. When another user clicks the link, the JavaScript is executed. This vulnerability can also be exploited in posts by users with contributor or author roles.

Remediation

Users are advised to update the WP Lightbox 2 WordPress plugin to version 3.0.6.8 or later.