Fancybox for Wordpress
Colorlibplugins · 2 CVEs
CVE-2024-5020
MEDIUM
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBo…
Dec 4, 2024
CVE-2024-0662
MEDIUM
The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in vers…
Apr 9, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-5020 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library | MEDIUM | 0.43% | Dec 4, 2024 |
| CVE-2024-0662 | The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 due to insufficient… | MEDIUM | 0.47% | Apr 9, 2024 |
Showing 1 to 2 of 2 CVEs