Input validation vulnerability in WP Lightbox 2 3.0.6.5

The WP Lightbox 2 plugin for WordPress is vulnerable to a type of attack known as Stored Cross-Site Scripting. This type of attack can potentially let someone with administrator-level access and above inject malicious web scripts into pages. When someone visits those pages, the scripts will execute and could lead to security issues. This vulnerability only affects WordPress installations that are multi-site or have a feature known as “unfiltered_html” disabled. Versions of the plugin up to and including 3.0.6.5 are affected.