1.14.9

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-14	CVE-2023-49833	Unspecified vulnerability in Brainstormforce Spectra Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra – WordPress Gutenberg Blocks allows Stored XSS.This issue affects Spectra – WordPress Gutenberg Blocks: from n/a through 2.7.9. network low complexity brainstormforce	5.4
2023-02-21	CVE-2020-36656	Cross-site Scripting vulnerability in Brainstormforce Spectra The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing contributors to conduct stored XSS attacks via the plugin's Gutenberg blocks. network low complexity brainstormforce CWE-79	5.4