WordPress Colorbox Lightbox plugin version 1.1.2 suffers from a persistent cross site scripting vulnerability.