Skip to content
Sign in
Not rated

CVE-2021-25008 The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it…

Description

The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue

Affected products and versions

Product Affected versions Fixed in
Code Snippets 2.14 earliest → < 2.14.3 2.14.3

Other CVEs of Code Snippets

The 3 CVEs of Code Snippets →
CVE-2026-106097 The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using… 6.8 Medium CVE-2026-106095 The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management… 3.3 Low
Track this CVE