CVE-2025-23803 WordPress Snippy Plugin <= 1.4.1 - CSRF to Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rik Schennink Snippy snippy allows Reflected XSS.This issue affects Snippy: from n/a through = 1.4.1...

CVE-2025-23803

CVE-2025-23803 — Cross-Site Request Forgery (CSRF) in PQINA Snippy leads to Reflected XSS. Affected: PQINA Snippy (WordPress plugin) with versions up to 1.4.1 (inclusive); documented as CSRF enabling reflected XSS. CVSS 3.1 score: 7.1 (HIGH). Connected Red Hat entry RH:CVE-2025-23803 reiterates t...