What’s Vulnerable › Products

tigroumeow Meow Lightbox vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your tigroumeow Meow Lightbox version is affected

Latest tigroumeow Meow Lightbox vulnerabilities

• CVE-2026-109234 — Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization (CVSS 7.2)
• CVE-2026-107756 — Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Output Buffering parser noise substitution via comment body + display_name (CVSS 6.4)