CVEvulnerability
CVE-2008-1061
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to (a) warning.php, (b) notice.php, and (c) inset.php in view/sniplets/, and possibly (d) modules/execute.php; the (2) url parameter to (e) view/admin/submenu.php; and the (3) page parameter to (f) view/admin/pager.php.
Affected configurations
• wordpress sniplets plugin 1.1.2
• wordpress sniplets plugin 1.2.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/29099 Vendor Advisory
- http://securityreason.com/securityalert/3706 securityreason.com
- http://www.securityfocus.com/archive/1/488734/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27985 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40830 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5194 www.exploit-db.com
- http://secunia.com/advisories/29099 Vendor Advisory
- http://securityreason.com/securityalert/3706 securityreason.com
- http://www.securityfocus.com/archive/1/488734/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27985 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40830 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5194 www.exploit-db.com