Gemini Labs Site Reviews vulnerabilities
7 known vulnerabilities affecting gemini_labs/site_reviews.
Total CVEs
7
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
HIGH2MEDIUM5
Vulnerabilities
Page 1 of 1
CVE-2026-73382P2HIGHCVSS 7.1Exploited≤ 8.2.02026-08-18
CVE-2026-73382 [HIGH] CWE-79 CVE-2026-73382: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.2.0.
nvd
CVE-2026-57318P3MEDIUMCVSS 6.5≥ n/a, ≤ 8.0.112026-06-26
CVE-2026-57318 [MEDIUM] CWE-201 CVE-2026-57318: Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions.
Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions.
nvd
CVE-2026-94078P4HIGHCVSS 7.1≥ n/a, ≤ 8.3.12026-09-30
CVE-2026-94078 [HIGH] CWE-79 CVE-2026-94078: Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions.
nvd
CVE-2026-103340P4MEDIUMCVSS 5.3≤ 8.3.22026-10-01
CVE-2026-103340 [MEDIUM] CWE-862 CVE-2026-103340: Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incor
Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.2.
nvd
CVE-2023-49832P4MEDIUMCVSS 5.3≤ 6.10.22024-12-09
CVE-2023-49832 [MEDIUM] CWE-862 CVE-2023-49832: Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incor
Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through <= 6.10.2.
nvd
CVE-2018-0603P4MEDIUMCVSS 6.1vprior to version 2.15.32018-06-26
CVE-2018-0603 [MEDIUM] CWE-79 CVE-2018-0603: Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers
Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2024-29095P4MEDIUMCVSS 5.9≤ 6.11.62024-03-19
CVE-2024-29095 [MEDIUM] CWE-79 CVE-2024-29095: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews.This issue affects Site Reviews: from n/a through <= 6.11.6.
nvd