Lucene search
PRIOn knowledge basePRION:CVE-2021-25010HistoryFeb 28, 2022 - 9:15 a.m.
Cross site scripting
2022-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
3
The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets. Furthermore, imported snippers are not sanitised and escaped, which could lead to Stored Cross-Site Scripting issues
| CPE | Name | Operator | Version |
|---|---|---|---|
| post_snippets | lt | 3.1.4 |
Related
patchstack
patchstack
cnvd
cnvd
WordPress Post Snippets plugin cross-site request forgery vulnerability
2022-03-02 00:00:00
nvd
nvd
CVE-2021-25010
2022-02-28 09:15:08
cve
cve
CVE-2021-25010
2022-02-28 09:15:08
cvelist
cvelist
CVE-2021-25010 Post Snippets < 3.1.4 - CSRF to Stored Cross-Site Scripting
2022-02-28 09:06:28
wpexploit
wpexploit
Post Snippets < 3.1.4 - CSRF to Stored Cross-Site Scripting
2022-01-31 00:00:00
wpvulndb
wpvulndb
Post Snippets < 3.1.4 - CSRF to Stored Cross-Site Scripting
2022-01-31 00:00:00