CVE List

CVE-2025-48922

Moderate 6.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GLightbox allows Cross-Site Scripting (XSS).This issue affects GLightbox: from 0.0.0 before 1.0.16.

Published June 26, 2025.

Affected software

Get alerts for Levmyshkin Glightbox

Reference links