High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-20	CVE-2023-28491	Unspecified vulnerability in Tribulant Slideshow Gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6. network low complexity tribulant	7.2
2023-11-12	CVE-2023-28497	Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions. network low complexity tribulant CWE-352	8.8