[support] Lightbox2 Cross Site Scripting

Hi Drupal folk, can you please advise the solution for the Cross Site Scripting problem. OWASP ZAP Testing Tool produced XSS error in the following location. URL: example.com/sites/javascript:alert(1);/modules/lightbox2/js <http://example.com/sites/javascript:alert%281%29;/modules/lightbox2/js> Parameter: all Thanks in advance for your help Regards Bharani