HomePentest-Tools.com Logo

Header Footer Code Manager < 1.1.24 - Cross-Site Scripting CVE-2022-0899

Severity
CVSSv3 Score
6.1
Vulnerability description

The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.\n

Risk description

No risk description to display.

Recommendation

We recommend you to upgrade the affected software to the latest version, which mitigates this vulnerability.

Codename
Not available
Detectable with
Network Scanner
Scan engine
Nuclei
Exploitable with Sniper
No
CVE Published
Jul 25, 2022
Detection added at
Software Type
Not available
Vendor
Not available
Product
Not available