Lucene search
BEE-K (Patchstack)PATCHSTACK:460E0F6542C9CECF25DBB42BE2E01D2BHistoryMay 17, 2022 - 12:00 a.m.
WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Persistent Cross-Site Scripting (XSS)
2022-05-1700:00:00
BEE-K (Patchstack)
patchstack.com
26
0.001 Low
EPSS
Percentile
20.9%
Cross-Site Request Forgery (CSRF) vulnerability leading to Persistent Cross-Site Scripting (XSS) was discovered by BEE-K (Patchstack) in WordPress Code Snippets Extended plugin (versions <= 1.4.7).
Solution
Deactivate and delete. No patched version is available. No reply from the vendor.
| CPE | Name | Operator | Version |
|---|---|---|---|
| code snippets extended | le | 1.4.7 |
Related
prion
prion
Cross site request forgery (csrf)
2022-05-17 20:15:00
cvelist
cvelist
wpvulndb
wpvulndb
Code Snippets Extended <= 1.4.7 - Stored Cross-Site Scripting via CSRF
2022-05-17 00:00:00
nvd
nvd
CVE-2022-29436
2022-05-17 20:15:09
cve
cve
CVE-2022-29436
2022-05-17 20:15:09