CVE-2025-9710medium

CVE-2025-9710: medium-severity vulnerability in Responsive Lightbox & Gallery

Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments

Published

Follow this CVE+ Monitor Responsive Lightbox & Gallery

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 0.2%
The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Unknown · Responsive Lightbox & Gallery
Related CVEs — Responsive Lightbox & Gallery

In the same product, most dangerous first.

CVE-2025-3742MEDIUMResponsive Lightbox & Gallery < 2.5.1 - Contributor+ Stored XSSEPSS 0.5%CVE-2025-15386HIGHResponsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored XSSEPSS 0.3%CVE-2025-5093MEDIUMResponsive Lightbox & Gallery < 2.5.2 - Contributor+ Stored XSSEPSS 0.2%