23systems

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

23systems records in CISA KEV

No 23systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lightbox Plus Colorbox 1 record LOW

Records

1 record in Lightbox Plus Colorbox · all components

TI-2016-08903 CVE-2016-10865 · GHSA-m478-gg46-9ffx

The Lightbox Plus Colorbox plugin through 2.7.2 for WordPress has cross-site request…

LOW 28

The Lightbox Plus Colorbox plugin through 2.7.2 for WordPress has cross-site request forgery (CSRF) via wp-admin/admin.php?page=lightboxplus, as demonstrated by resultant width XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00515 Published 2019-08-09 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0