WordPress Code Snippets plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of the Code Snippets plugin for WordPress prior to 2.14.3, which stems from not escaping the Snippets security mode parameter. An attacker could exploit the vulnerability to execute JavaScript code on the client side.