Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-08-22	CVE-2022-1322	Unspecified vulnerability in Rich-Web Coming Soon The Coming Soon - Under Construction WordPress plugin through 1.1.9 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed network low complexity rich-web	4.8
2022-08-01	CVE-2022-1324	Unspecified vulnerability in Rich-Web Event Timeline The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed network low complexity rich-web	4.8
2022-06-27	CVE-2022-1327	Unspecified vulnerability in Rich-Web Image Gallery The Image Gallery WordPress plugin before 1.1.6 does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed network low complexity rich-web	4.8