Aller au contenu
Se connecter
6.8 Moyenne

CVE-2026-12980 The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets…

Description

The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.

Produits et versions touchés

Produit Versions touchées Corrigé en
Post Snippets 4.2 premières → 4.2.4 Pas de correctif indiqué

Autres CVE de Post Snippets

Les 2 CVE de Post Snippets →
CVE-2021-25010 The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make… Non notée
Suivre cette CVE