CVE-2021-25008: Codesnippets Code Snippets

Medium severity, CVSS 6.1. EPSS: 2.3% chance of exploitation in the next 30 days.

The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue

Affected products

• Codesnippets Code Snippets: before 2.14.3 (fixed in 2.14.3)

Published 2022-01-24. Last modified 2026-06-17.