Header Footer Code Manager, CVE-2021-24791

CVE, Research URL: CVE-2021-24791
Home page URL: Security reports for Header Footer Code Manager
Application: Header Footer Code Manager
Published on: Nov 08, 2021
Research Description: The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections
Affected versions: Min -, max 1.1.14.
Status: vulnerable