Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbTaurus OmarWPVDB-ID:1772417A-1ABB-4D97-9694-1254840DEFD1
HistoryJul 04, 2022 - 12:00 a.m.

Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting

2022-07-0400:00:00
Taurus Omar
wpscan.com
7

0.001 Low

EPSS

Percentile

43.5%

JSON

The plugin does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.

PoC

https://example.com/wp-admin/admin.php?page=hfcm-list&'>

CPENameOperatorVersion
header-footer-code-managerlt1.1.24

Related

cvelist 1
nvd 1
openvas 1
cve 1
patchstack 1
nuclei 1
prion 1
wpexploit 1
cvelist
cvelist
CVE-2022-0899 Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting
2022-07-25 12:45:49
nvd
nvd
CVE-2022-0899
2022-07-25 13:15:08
openvas
openvas
WordPress Header Footer Code Manager Plugin < 1.1.24 XSS Vulnerability
2022-07-26 00:00:00
cve
cve
CVE-2022-0899
2022-07-25 13:15:08
patchstack
patchstack
WordPress Header Footer Code Manager plugin <= 1.1.23 - Reflected Cross-Site Scripting (XSS) vulnerability
2022-07-04 00:00:00
nuclei
nuclei
Header Footer Code Manager < 1.1.24 - Cross-Site Scripting
2023-10-17 07:20:28
prion
prion
Cross site scripting
2022-07-25 13:15:00
wpexploit
wpexploit
Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting
2022-07-04 00:00:00

0.001 Low

EPSS

Percentile

43.5%

JSON
Related for WPVDB-ID:1772417A-1ABB-4D97-9694-1254840DEFD1
cvelist1nvd1openvas1cve1patchstack1nuclei1prion1wpexploit1