VYPR
Unrated severityNVD Advisory· Published May 15, 2025· Updated May 20, 2025

Smooth Gallery Replacement <= 1.0 - CSRF to Stored XSS

CVE-2024-8032

Description

The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.