CVE-2025-23803

creationtimestamp| type| source ---|---|--- 2025-01-22 15:20:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo76vrzk2h 2025-01-22 17:13:48+00:00| seen| https://t.me/cvedetector/16107...

CVE-2025-23803 WordPress Snippy Plugin <= 1.4.1 - CSRF to Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rik Schennink Snippy snippy allows Reflected XSS.This issue affects Snippy: from n/a through = 1.4.1...

CVE-2025-23803

CVE-2025-23803 — Cross-Site Request Forgery (CSRF) in PQINA Snippy leads to Reflected XSS. Affected: PQINA Snippy (WordPress plugin) with versions up to 1.4.1 (inclusive); documented as CSRF enabling reflected XSS. CVSS 3.1 score: 7.1 (HIGH). Connected Red Hat entry RH:CVE-2025-23803 reiterates t...