CVE-2021-24791

The CVE-2021-24791 issue affects the WordPress plugin Header Footer Code Manager prior to 1.1.14. The vulnerability is a SQL injection in the Snippets admin dashboard caused by failing to validate/escape the orderby and order parameters used in a SQL statement. Exploitation requires authenticated...