The Snippets extension for Joomla versions Snippets Free <7.0.0 and Snippets Pro <11.0.0 improperly neutralizes input during web page generation, specifically in the substitution of variable values supplied by article tags into saved Snippet content. The flaw is that the extension does not consider the trust level of the article author, enabling a lower-privileged author to inject malicious script content into a security-sensitive context controlled by a trusted Snippet author. This results in a stored cross-site scripting vulnerability classified as CWE-79.

An attacker with lower-privileged author access can inject malicious scripts into Snippet content that is then executed in the context of higher-privileged users viewing the content. This can lead to unauthorized actions, data theft, or session hijacking within the Joomla environment. The vulnerability has a CVSS 4.0 score of 7.5, indicating high severity with network attack vector, low attack complexity, and requiring privileges but no user interaction.

No explicit patch or official fix is indicated in the provided data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict article author privileges to trusted users only and avoid using untrusted input in Snippet variables. Monitor vendor communications for updates and apply official patches when released.