Aller au contenu
Se connecter
Non notée

CVE-2021-25008 The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it…

Description

The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue

Produits et versions touchés

Produit Versions touchées Corrigé en
Code Snippets 2.14 premières → < 2.14.3 2.14.3

Autres CVE de Code Snippets

Les 3 CVE de Code Snippets →
CVE-2026-106097 The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using… 6.8 Moyenne CVE-2026-106095 The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management… 3.3 Faible
Suivre cette CVE