Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:header_footer_code_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductHeader Footer Code Manager (99c5abf9-7090-57e4-aa91-9bb4dcec52e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0899 vulnerable 2026-06-08 05:39:11.434849 Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting
The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.
Published: 2022-07-25T12:45:49.000Z
Updated: 2024-08-02T23:47:42.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24791 vulnerable 2026-06-08 05:30:39.244967 Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections
The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections
Published: 2021-11-08T17:35:21.000Z
Updated: 2024-08-03T19:42:17.170Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.