Medium severity6.1NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2022-0710

Description

The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter.

Affected products

WordPress/Header Footer Code Managerllm-fuzzy
Range: <=1.1.16
Package: https://wordpress.org/plugins/header-footer-code-manager
99robots/Header Footer Code Managerv5
Range: 1.1.16

Patches

Vulnerability mechanics

References

www.wordfence.com/blog/2022/02/reflected-xss-in-header-footer-code-manager/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000