3 matches found
CVE-2021-25008
The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue...
CVE-2021-25008: Improper Neutralization of Input During Web Page Generation
The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue...
PT-2022-9565
Name of the Vulnerable Software and Affected Versions Code Snippets WordPress plugin versions prior to 2.14.3 Description The issue is related to a Reflected Cross-Site Scripting problem. This occurs because the snippets-safe-mode parameter is not properly escaped before being outputted back in...