Security Advisory

CVE-2016-10865

6.1
MEDIUM

Vulnerability Description

The Lightbox Plus Colorbox plugin through 2.7.2 for WordPress has cross-site request forgery (CSRF) via wp-admin/admin.php?page=lightboxplus, as demonstrated by resultant width XSS.
Published Date August 9, 2019
Official Source NIST NVD Advisory