VYPR

Video Gallery

by Nik00726

CVEs (2)

  • CVE-2023-32597HigAug 30, 2023
    risk 0.46cvss 7.1epss 0.00

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Gallery plugin <= 1.0.10 versions.

  • CVE-2023-2708MedMay 16, 2023
    risk 0.40cvss 6.1epss 0.01

    The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…