Description
Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the article author's trust level. A lower-privileged author can therefore place an unsafe value into a security-sensitive position chosen by the trusted Snippet author.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
regularlabs.com Snippets (Free) extension for Joomla
Default version status: unaffected
1.0.0-6.9.4affected
regularlabs.com Snippets (Pro) extension for Joomla
Default version status: unaffected
1.0.0-10.0.6affected