WordPress Post Snippets Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Post Snippets Type Plugin Vulnerable versions = 4.0.2 Fixed in 4.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25459 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID db47be90330a Credits Abdi Pranata Required...

WordPress Post Snippets plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. cross-site request forgery vulnerability exists in versions of the WordPress Post Snippets plugin prior to 3.1.4, which stems fro...

CVE-2021-25010

The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets. Furthermore, imported snippers are not sanitised and escaped, which could lead to Stored Cross-Site Scripting issues...

CVE-2021-25010

CVE-2021-25010 affects the WordPress Post Snippets plugin prior to 3.1.4. The root cause is absence of CSRF checks when importing files, allowing a logged-in admin to import arbitrary snippets. Imported snippets are not sanitized/escaped, enabling Stored Cross-Site Scripting (XSS). Documented ref...

CVE-2021-25010 Post Snippets < 3.1.4 - CSRF to Stored Cross-Site Scripting

The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets. Furthermore, imported snippers are not sanitised and escaped, which could lead to Stored Cross-Site Scripting issues...

WordPress 跨站请求伪造漏洞

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. cross-site request forgery vulnerability exists in versions of the WordPress Post Snippets plugin prior to 3.1.4, which stems fro...

WordPress Post Snippets plugin <= 3.1.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Post Snippets plugin versions = 3.1.6. Solution Update the WordPress Post Snippets plugin to the latest available version at least 3.1.7...

WordPress Post Snippets plugin <= 3.1.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Post Snippets plugin versions = 3.1.6. Solution Update the WordPress Post Snippets plugin to the latest available version at least 3.1.7...

Post Snippets < 3.1.4 - CSRF to Stored Cross-Site Scripting

The plugin does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets. Furthermore, imported snippers are not sanitised and escaped, which could lead to Stored Cross-Site Scripting issues function submitRequest var xhr = new XMLHttpRequest...

WordPress Post Snippets plugin <= 3.1.3 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS discovered by Muhammad Adel in WordPress Post Snippets plugin versions = 3.1.3. Solution Update the WordPress Post Snippets plugin to the latest available version at least 3.1.4...