{"id":"CVE-2024-8032","aliases":["EUVD-2025-15247","GHSA-w7g4-p5vp-3m77"],"status":"published","title":"Smooth Gallery Replacement \u003c= 1.0 - CSRF to Stored XSS","description":"The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00169,"percentile":0.06258,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2025-05-15T20:07:12Z","modified":"2026-06-17T08:21:43Z","products":[{"vendor":"ulfbenjaminsson","product":"smooth_gallery_replacement"},{"vendor":"unknown","product":"smooth gallery replacement"}],"references":[{"url":"https://wpscan.com/vulnerability/4c9120b1-ca81-411b-a2e2-a8d30f32a74b/","tags":["exploit","vdb-entry","technical-description","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8032"},{"url":"https://wpscan.com/vulnerability/4c9120b1-ca81-411b-a2e2-a8d30f32a74b"},{"url":"https://github.com/advisories/GHSA-w7g4-p5vp-3m77"}],"sources":{"cve":[{"id":"CVE-2024-8032","title":"Smooth Gallery Replacement \u003c= 1.0 - CSRF to Stored XSS","description":"The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.","status":"published","published":"2025-05-15T20:07:12.766Z","modified":"2025-05-20T19:20:57.776Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:34:09.216761Z"}],"euvd":[{"id":"EUVD-2025-15247","description":"The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.","status":"published","published":"2025-05-15T20:07:12Z","modified":"2025-05-20T19:20:57Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:42.371776Z"}],"ghsa":[{"id":"GHSA-w7g4-p5vp-3m77","title":"The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some...","description":"The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.","status":"published","published":"2025-05-15T21:31:32Z","modified":"2025-06-12T18:32:14Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:02:42.831943Z"}],"nvd":[{"id":"CVE-2024-8032","description":"The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.","status":"published","published":"2025-05-15T20:15:57.423Z","modified":"2026-06-17T08:21:43.46Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:10:47.073504Z"}]}}