Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-12-13	CVE-2022-4207	Unspecified vulnerability in Oxilab Image Hover Effects Ultimate The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in versions 9.8.1 to 9.8.4 due to insufficient input sanitization and output escaping. network low complexity oxilab	5.4
2022-01-24	CVE-2021-25031	Cross-site Scripting vulnerability in Oxilab Image Hover Effects Ultimate The Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) WordPress plugin before 9.7.1 does not escape the effects parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting network oxilab CWE-79	4.3