CVE-2021-24791

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections...

CVE-2021-24791

creationtimestamp| type| source ---|---|--- 2021-11-08 20:29:16+00:00| seen| https://t.me/cibsecurity/31991 2023-10-17 12:50:28+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24791.yaml...

CVE-2021-24791 Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections...

CVE-2021-24791

The CVE-2021-24791 issue affects the WordPress plugin Header Footer Code Manager prior to 1.1.14. The vulnerability is a SQL injection in the Snippets admin dashboard caused by failing to validate/escape the orderby and order parameters used in a SQL statement. Exploitation requires authenticated...