Lucene search
+L

2 matches found

attackerkb
attackerkb
•added 2022/01/24 8:15 a.m.•8 views

CVE-2021-25008

The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.4AI score0.02258EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•6 views

CVE-2021-25008: Improper Neutralization of Input During Web Page Generation

The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS5.9AI score0.02258EPSS
SaveExploits2References2
Rows per page
Query Builder