Title: latest version – query variable value ?
Last modified: December 28, 2021

---

# latest version – query variable value ?

 *  [fotinos](https://wordpress.org/support/users/fotinos/)
 * (@fotinos)
 * [4 years, 5 months ago](https://wordpress.org/support/topic/latest-version-query-variable-value/)
 * Hi,
 * Thank you for the great work on this plugin!
 * The latest’s version update reads: “Potential security issue outputting snippets-
   safe-mode query variable value as-is”
 * What is a query variable value and how could this be outputted?
 * I have updated to the latest version but I’m unsure what was the security issue
   and how to check whether my site is affected.
 * Again, thank you for your time!

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Thread Starter [fotinos](https://wordpress.org/support/users/fotinos/)
 * (@fotinos)
 * [4 years, 5 months ago](https://wordpress.org/support/topic/latest-version-query-variable-value/#post-15214831)
 * From what I see @ [https://wpscan.com/vulnerability/cb232354-f74d-48bb-b437-7bdddd1df42a](https://wpscan.com/vulnerability/cb232354-f74d-48bb-b437-7bdddd1df42a)
 * Is it correct to assume that an admin needs to be logged in to the WP site for
   the “Reflected Cross-Site Scripting” to occur?
 * Thank you for your time and again, thank you for the great plugin!
 *  Plugin Author [Shea Bunge](https://wordpress.org/support/users/bungeshea/)
 * (@bungeshea)
 * [4 years, 1 month ago](https://wordpress.org/support/topic/latest-version-query-variable-value/#post-15621213)
 * Hello,
 * Yes, an admin would need to be logged-in for this to occur.
 * Even still, it’s something to be wary about, as an administrator could be tricked
   into clicking on a malicious link posted in the comments section or similar.
 * Please let us know if you have any further questions.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘latest version – query variable value ?’ is closed to new replies.

 * ![](https://ps.w.org/code-snippets/assets/icon.svg?rev=2148878)
 * [Code Snippets](https://wordpress.org/plugins/code-snippets/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/code-snippets/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/code-snippets/)
 * [Active Topics](https://wordpress.org/support/plugin/code-snippets/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/code-snippets/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/code-snippets/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [Shea Bunge](https://wordpress.org/support/users/bungeshea/)
 * Last activity: [4 years, 1 month ago](https://wordpress.org/support/topic/latest-version-query-variable-value/#post-15621213)
 * Status: not a support question