PRODUCT PROFILE

header_footer_code_manager

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2022-08992022/07/25

Header Footer Code Manager < 1.1.24 - Cross-Site Scripting

The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.

header_footer_code_managerPoC 已收录

CVSS6.1EPSS 30.4%

高危CVE-2021-247912021/11/09

Header Footer Code Manager < 1.1.14 - Admin+ SQL Injection

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections

header_footer_code_managerPoC 已收录

CVSS7.2EPSS 6.3%