https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:46:34.585604+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-24667 CVE-2021-24667 — Gallery Blocks with Lightbox < 2.2.1- Authenticated Stored Cross-Site Scripting 2026-09-29T19:46:34.587476+00:00

Affected: Unknown Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below). The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of image parameters in meta data.