Read the docs

Lightgallery Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Lightgallery Project records in CISA KEV

No Lightgallery Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lightgallery 1 record LOW

Records

1 record

TI-2025-30738 CVE-2025-48447 · GHSA-w5px-5878-m9x4

Lightgallery - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-069

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Lightgallery allows Cross-Site Scripting (XSS).This issue affects Lightgallery: from 0.0.0 before 1.6.0.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00349 Published 2025-06-11 Fixed in 1.6.0 CWE-79
Open these records in search →