CVE-2017-2243

Description

Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• dFactory / Responsive Lightboxprior to version 1.7.2 – prior to version 1.7.2

References

• MISChttp://www.securityfocus.com/bid/99463
• MISChttp://jvn.jp/en/jp/JVN39819446/index.html
• MISChttps://wordpress.org/plugins/responsive-lightbox/#developers