Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-2361 1 Quadlayers 1 Wp Social Chat 2024-11-21 4.8 Medium
The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks.
CVE-2019-15779 1 Quadlayers 1 Wp Social Feed Gallery 2024-11-21 N/A
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.