2.2.3

DATE	CVE	VULNERABILITY TITLE	RISK
2024-10-23	CVE-2024-43924	Missing Authorization vulnerability in Dfactory Responsive Lightbox Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7. network low complexity dfactory CWE-862 critical	9.8
2024-08-22	CVE-2024-6870	Cross-site Scripting vulnerability in Dfactory Responsive Lightbox The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping affecting the rl_upload_image AJAX endpoint. network low complexity dfactory CWE-79	5.4
2023-12-15	CVE-2023-49174	Unspecified vulnerability in Dfactory Responsive Lightbox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory Responsive Lightbox & Gallery allows Stored XSS.This issue affects Responsive Lightbox & Gallery: from n/a through 2.4.5. network low complexity dfactory	5.4