5 matches found
GHSA-G7PX-3Q98-P26J vulnerabilities
Vulnerabilities for packages: chromium...
WordPress Smooth Gallery Replacement plugin <= 1.0 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Daniel Ruf in WordPress Plugin Smooth Gallery Replacement versions = 1.0...
CVE-2024-8032
The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
CVE-2024-8032
The Smooth Gallery Replacement WordPress plugin (versions 1.0 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to missing CSRF checks, sanitization, and escaping in certain areas. This flaw could allow an attacker to trick a logged-in administrator into adding Stored ...
CVE-2024-8032 Smooth Gallery Replacement <= 1.0 - CSRF to Stored XSS
The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...