CVE WATCH / VULNERABILITY DETAIL

CVE-2026-116395

MEDIUMCVSS 6.5NVD feed

Published 26 October 2026 · tracked since 27 October 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins LightBox Block lightbox-block allows Stored XSS.This issue affects LightBox Block: from n/a through 1.2.0.

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools