CVE-2021-25008

The Code Snippets WordPress plugin prior to version 2.14.3 does not escape the snippets-safe-mode parameter before reflecting it in attributes, which leads to a reflected XSS. Affected: WordPress Code Snippets plugin for WordPress (versions

CVE-2022-25617

The CVE-2022-25617 entry refers to a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress Code Snippets plugin up to version 2.14.3, exploitable via the &orderby parameter. Affected software: Code Snippets plugin for WordPress (