CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-25008 | Code Snippets [code-snippets] < 2.14.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.14.3 | 2.14.3 | 2021-12-27 | — |
The Code Snippets plugin versions before 2.14.3 contain a reflected cross-site scripting vulnerability where the snippets-safe-mode parameter is output in HTML attributes without proper escaping, allowing attackers to inject malicious scripts.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.