Vulnerabilities

TI-2008-01015 CVE-2008-1061 · GHSA-c8f9-9v3g-7mx6

Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2…

LOW 30

Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to (a) warning.php, (b) no…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.074 Published 2008-02-28 No fix listed CWE-79

TI-2008-01014 CVE-2008-1060 · GHSA-gfcc-x5pv-wrjh

Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2…

MEDIUM 62

Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.44222 Published 2008-02-28 No fix listed CWE-94

TI-2008-01013 CVE-2008-1059 · GHSA-mjh4-63mf-8xqc

PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets…

MEDIUM 63

PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.48329 Published 2008-02-28 No fix listed CWE-94

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2…

Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2…

PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets…