CVE-2024-8032

CVE-2024-8032 affects the WordPress plugin Smooth Gallery Replacement (versions up to 1.0). The issue arises from missing CSRF protections and lack of sanitisation/escaping, enabling a logged-in admin to inject a Stored XSS payload via CSRF. The connected patches document notes remediation by upg...

CVE-2024-8032 Smooth Gallery Replacement <= 1.0 - CSRF to Stored XSS

The Smooth Gallery Replacement WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress plugin Smooth Gallery Replacement 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

echoesofsinatra.com XSS vulnerability

Vulnerable URL: http://echoesofsinatra.com/wp-content/plugins/nextgen-smooth-gallery/nggSmoothFrame.php?galleryID=9=540=540=1=1=1=1=5000=fade=1=Slides=== http://edjesales.com/catalogpage.php?catalogid=613 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

WordPress NextGen Smooth Gallery Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

NextGen Smooth Gallery - XSS

The nextgen-smooth-gallery WordPress plugin was affected by a XSS security vulnerability...

NextGEN Smooth Gallery - Blind SQL Injection

The nextgen-smooth-gallery WordPress plugin was affected by a Blind SQL Injection security vulnerability...

WordPress NextGEN Smooth Gallery 0.12 - Blind SQL Injection Vulnerability

No description provided by source. WordPress NextGEN Smooth Gallery BLIND SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 03 August, 2010 Software Information + Download : http://downloads.wordpress.org/plugin/nextgen-smooth-gallery.1.2.zip +...

WordPress NextGen Smooth Gallery Plugin <= 1.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress NextGen Smooth Gallery Cross Site Scripting

Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress nextgen-smooth-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected] Home : http://iedb.ir - http://iedb.ir/acc Software Link :...

WordPress NextGEN Smooth Gallery Blind SQL Injection

WordPress NextGEN Smooth Gallery BLIND SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 03 August, 2010 Software Information + Download : http://downloads.wordpress.org/plugin/nextgen-smooth-gallery.1.2.zip + version : 1.2 or lower maybe also...

WordPress Plugin NextGEN Smooth Gallery 0.12 - Blind SQL Injection

WordPress NextGEN Smooth Gallery BLIND SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 03 August, 2010 Software Information + Download : http://downloads.wordpress.org/plugin/nextgen-smooth-gallery.1.2.zip + version : 1.2 or lower maybe also...

WordPress NextGEN Smooth Gallery Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================== WordPress NextGEN Smooth Gallery Blind SQL Injection Vulnerability ================================================================== WordPress NextGEN Smooth Gallery BLIND SQL...

WordPress Plugin NextGEN Smooth Gallery 0.12 - Blind SQL Injection

WordPress Plugin NextGEN Smooth Gallery 0.12 - Blind SQL Injection WordPress NextGEN Smooth Gallery BLIND SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 03 August, 2010 Software Information + Download :...

WordPress NextGEN Smooth Gallery Plugin 0.12 - Blind SQL Injection Vulnerability

This NextGEN Smooth Gallery plugin is prone to an SQL injection vulnerability. It fails to clean up user's data before using it in an SQL query. Also, this plugin allows an attacker to compromise the access, application, modify data or exploit hidden vulnerabilities in the underlying database...