CVE-2014-9559: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTML via the query parameter to /snipsnap-search...

PT-2015-4272

Name of the Vulnerable Software and Affected Versions SnipSnap versions 0.5.2a, 1.0b1, 1.0b2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the query parameter to "/snipsnap-search". Recommendations For versions 0.5.2a, 1.0b1, and 1.0b2...