CVE-2008-1061 - CVE House
Back to Database
Status published Medium CVE-2008-1061

Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to (a) warning.php, (b) notice.php, and (c) inset.php in view/sniplets/, and possibly (d) modules/execute.php; the (2) url parameter to (e) view/admin/submenu.php; and the (3) page parameter to (f) view/admin/pager.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1061

Credits & Attribution

No credits recorded in the NVD database.

References

More from wordpress

View All →
CVE-2021-44223
WordPress before 5.8 lacks support for the Update URI plugin...
High 8.1
CVE-2020-28040
WordPress before 5.5.2 allows CSRF attacks that change a theme's...
Medium 4.3
CVE-2020-28039
is_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file...
Critical 9.1
CVE-2020-28038
WordPress before 5.5.2 allows stored XSS via post slugs....
Medium 6.1
CVE-2020-28037
is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether...
Critical 9.8

Affected Vendor

Affected Software

sniplets plugin
Vulnerable Versions:
1.1.2, 1.2.2

Timeline

Official Publish: February 28th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.