Security Advisory

CVE-2021-25008

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-01-24 08:01:07

Last updated 2024-08-03 19:49:14

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue

← Browse all CVEs View on cve.org ↗