CVE-2025-31392

Name of the Vulnerable Software and Affected Versions: Shameem Reza Smart Product Gallery Slider versions 1.0.0 through 1.0.4

Description: The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations: For versions 1.0.0 through 1.0.4, consider implementing proper CSRF token validation to prevent unauthorized requests. As a temporary workaround, restrict access to sensitive functionality that may be exploited through CSRF attacks until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.