Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25008

Code Snippets < 2.14.3 - Reflected Cross-Site Scripting

Description

The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Code Snippets

  • 2.14.3 to < 2.14.3affected

References