Header Footer Code Manager, CVE-2022-0899

CVE, Research URL: CVE-2022-0899
Home page URL: Security reports for Header Footer Code Manager
Application: Header Footer Code Manager
Published on: Jul 25, 2022
Research Description: The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.
Affected versions: Min -, max 1.1.35.
Status: vulnerable