A vulnerability categorized as problematic has been discovered in Syed Balkhi WP Lightbox 2 Plugin up to 3.0.6 on WordPress. This affects an unknown part of the component Setting Handler. Such manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2026-1430. The attack may be launched remotely. There is no exploit available.
It is advisable to upgrade the affected component.