← CVE Intelligence

CVE-2022-0899

Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.

Affected (CNA)

Vendor / productVersions
Unknown / Header Footer Code Manageraffected 1.1.24 before 1.1.24

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.