WordPress Custom Smilies plugin <= 1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Custom Smilies versions = 1.2...

CVE-2025-32482

CVE-2025-32482 affects the WordPress plugin Custom Smilies (vendor/product not specified in the provided docs) with a Cross-Site Request Forgery leading to Stored XSS . The initial entry lists a CVSS v3.1 base score of 7.1 (HIGH) and notes affected versions as “from n/a through 1.2.” The connecte...