Sermon Browser Project Sermon Browser
2 CVEs affecting Sermon Browser Project Sermon Browser. Latest disclosed: 2022-03-28. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0499 | High | 8.8 | 2022-03-28 | The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allo… |
CVE-2016-10897 | Medium | 6.1 | 2019-08-21 | The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues. |