Vulnerabilities > I13Websolution > Video Gallery > 1.0.9

DATE CVE VULNERABILITY TITLE RISK
2023-08-30 CVE-2023-32597 Cross-site Scripting vulnerability in I13Websolution Video Gallery
Unauth.
network
low complexity
i13websolution CWE-79
6.1
6.1
2023-05-16 CVE-2023-2708 Cross-site Scripting vulnerability in I13Websolution Video Gallery
The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping.
network
low complexity
i13websolution CWE-79
6.1
6.1