Lucene search
Taurus OmarWPEX-ID:1772417A-1ABB-4D97-9694-1254840DEFD1HistoryJul 04, 2022 - 12:00 a.m.
Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting
2022-07-0400:00:00
Taurus Omar
87
0.001 Low
EPSS
Percentile
43.5%
The plugin does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.
https://example.com/wp-admin/admin.php?page=hfcm-list&'><script>alert(/XSS/)</script>Related
cvelist
cvelist
nvd
nvd
CVE-2022-0899
2022-07-25 13:15:08
wpvulndb
wpvulndb
Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting
2022-07-04 00:00:00
openvas
openvas
WordPress Header Footer Code Manager Plugin < 1.1.24 XSS Vulnerability
2022-07-26 00:00:00
cve
cve
CVE-2022-0899
2022-07-25 13:15:08
patchstack
patchstack
nuclei
nuclei
Header Footer Code Manager < 1.1.24 - Cross-Site Scripting
2023-10-17 07:20:28
prion
prion
Cross site scripting
2022-07-25 13:15:00