Vulnerabilities

TI-2025-17245 CVE-2025-23478 · GHSA-5534-8425-cj8p

WordPress Photo Video Store plugin <= 21.07 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmsaccount Photo Video Store photo-video-store allows Reflected XSS.This issue affects Photo Video Store: from n/a thr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00281 Published 2025-03-03 No fix listed CWE-79

TI-2024-35980 CVE-2024-53782 · GHSA-32wm-927m-gppc

WordPress Photo Video Store plugin <= 21.07 - CSRF to Cross Site Scripting (XSS) vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in cmsaccount Photo Video Store photo-video-store allows Cross-Site Scripting (XSS).This issue affects Photo Video Store: from n/a through <= 21.07.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00158 Published 2024-12-02 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Photo Video Store plugin <= 21.07 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Photo Video Store plugin <= 21.07 - CSRF to Cross Site Scripting (XSS) vulnerability