CVE-2026-118165 | Firelight Lightbox Plugin up to 2.3.22 on WordPress cross site scripting

October 30, 2026 Yanac

A vulnerability identified as problematic has been detected in Firelight Lightbox Plugin up to 2.3.22 on WordPress. Affected is an unknown function. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-118165. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More