CVE-2025-3649 | LightPress Lightbox Plugin up to 2.3.3 on WordPress Non-Javascript URL cross site scripting

A vulnerability, which was classified as problematic, has been found in LightPress Lightbox Plugin up to 2.3.3 on WordPress. This issue affects some unknown processing of the component Non-Javascript URL Handler. The manipulation leads to cross site scripting.

The identification of this vulnerability is CVE-2025-3649. The attack may be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.