← Database

CVE-2022-29436

MEDIUM CVSS: 4.7 Published: 2022-05-17 Modified: 2026-06-17

Description

Persistent Cross-Site Scripting (XSS) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress via Cross-Site Request Forgery (vulnerable parameters &title, &snippet_code).

Affected Platforms

Code Snippets Extended Project Code Snippets Extended

Weakness Type

CWE-79, CWE-352, CWE-79, CWE-352

References