Логотип exploitDog
bind:CVE-2024-8032
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-8032

Количество 2

Количество 2

nvd логотип

CVE-2024-8032

9 месяцев назад

The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-w7g4-p5vp-3m77

9 месяцев назад

The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-8032

The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
0%
Низкий
9 месяцев назад
github логотип
GHSA-w7g4-p5vp-3m77

The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
0%
Низкий
9 месяцев назад

Уязвимостей на страницу