The Responsive Lightbox & Gallery plugin for WordPress has a security vulnerability that could allow attackers with administrator-level permissions to inject malicious web scripts into pages. If a user were to access an injected page, these scripts would be executed. This vulnerability affects versions up to, and including, 2.4.1 due to the lack of sanitization and output escaping of text fields.