CVE-2024-8032

MEDIUM

Smooth Gallery Replacement <1.0 - XSS

Title source: llm

Description

The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

References (1)

[Exploit, Third Party Advisory] https://wpscan.com/vulnerability/4c9120b1-ca81-411b-a2e2-a8d30f32a74b/

Scores

CVSS v3 6.1

EPSS 0.0011

EPSS Percentile 29.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE

CWE-352

Status published

Affected Products (1)

ulfbenjaminsson/smooth_gallery_replacement < 1.0

Timeline

Published May 15, 2025

Tracked Since Feb 18, 2026