4 matches found
CVE-2022-0710
The Header Footer Code Manager plugin
CVE-2022-0899
The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2021-24791
The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections
CVE-2023-39989
Cross-Site Request Forgery (CSRF) vulnerability in 99robots Header Footer Code Manager plugin