CVE-2020-8417

概要

参考情報

• wordpress.org/plugins/code-snippets · Vendor Advisory
• wpvulndb.com/vulnerabilities/10050 · Exploit

code snippets のその他の脆弱性

• CVE-2022-25617中 6.1Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerable parameter.
• CVE-2021-25008中 6.1The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, l…