TI-2010-00940 CVE-2010-0979 · GHSA-3h6g-vwfm-p62qCross-site scripting (XSS) vulnerability in display.php in Obsession-Design Image-Gallery…Priority LOW 22Cross-site scripting (XSS) vulnerability in display.php in Obsession-Design Image-Gallery (ODIG) 1.1 allows remote attackers to inject arbitrary web script or HTML via the folder parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01075 · Published 2010-03-16 · No fix listed CWE-79