XSS attack in Insert headers and footers in the icons

The icons’s height and width of the headers and footers are not properly escaped to prevent an XSS attack.

This vulnerability affects the following application versions:

  • WPCode – Insert Headers and Footers 2.0.0
  • WPCode – Insert Headers and Footers 2.0.1
  • WPCode – Insert Headers and Footers 2.0.2
  • WPCode – Insert Headers and Footers 2.0.3
  • WPCode – Insert Headers and Footers 2.0.4
  • WPCode – Insert Headers and Footers 2.0.4.1
  • WPCode – Insert Headers and Footers 2.0.4.2
  • WPCode – Insert Headers and Footers 2.0.4.3
  • WPCode – Insert Headers and Footers 2.0.4.4
  • WPCode – Insert Headers and Footers 2.0.5
  • WPCode – Insert Headers and Footers 2.0.6
  • WPCode – Insert Headers and Footers 2.0.7
  • WPCode – Insert Headers and Footers 2.0.8
  • WPCode – Insert Headers and Footers 2.0.8.1
  • WPCode – Insert Headers and Footers 2.0.9
  • WPCode – Insert Headers and Footers 2.0.10
  • WPCode – Insert Headers and Footers 2.0.11
  • WPCode – Insert Headers and Footers 2.0.12
  • WPCode – Insert Headers and Footers 2.0.13
  • WPCode – Insert Headers and Footers 2.0.13.1
  • WPCode – Insert Headers and Footers 2.1.0
  • WPCode – Insert Headers and Footers 2.1.1
  • WPCode – Insert Headers and Footers 2.1.2
  • WPCode – Insert Headers and Footers 2.1.3
  • WPCode – Insert Headers and Footers 2.1.3.1
  • WPCode – Insert Headers and Footers 2.1.4
  • WPCode – Insert Headers and Footers 2.1.4.1
  • WPCode – Insert Headers and Footers 2.1.5
  • WPCode – Insert Headers and Footers 2.1.6
  • WPCode – Insert Headers and Footers 2.1.7
  • WPCode – Insert Headers and Footers 2.1.8

XSS injection in Metabox Row

Cross Site Scripting vector available when user-provided data is directly inserted into HTML attributes without sanitization or escaping .

This vulnerability affects the following application versions:

  • WPCode – Insert Headers and Footers 2.0.0
  • WPCode – Insert Headers and Footers 2.0.1
  • WPCode – Insert Headers and Footers 2.0.2
  • WPCode – Insert Headers and Footers 2.0.3
  • WPCode – Insert Headers and Footers 2.0.4
  • WPCode – Insert Headers and Footers 2.0.4.1
  • WPCode – Insert Headers and Footers 2.0.4.2
  • WPCode – Insert Headers and Footers 2.0.4.3
  • WPCode – Insert Headers and Footers 2.0.4.4
  • WPCode – Insert Headers and Footers 2.0.5
  • WPCode – Insert Headers and Footers 2.0.6
  • WPCode – Insert Headers and Footers 2.0.7
  • WPCode – Insert Headers and Footers 2.0.8
  • WPCode – Insert Headers and Footers 2.0.8.1
  • WPCode – Insert Headers and Footers 2.0.9
  • WPCode – Insert Headers and Footers 2.0.10
  • WPCode – Insert Headers and Footers 2.0.11
  • WPCode – Insert Headers and Footers 2.0.12
  • WPCode – Insert Headers and Footers 2.0.13
  • WPCode – Insert Headers and Footers 2.0.13.1
  • WPCode – Insert Headers and Footers 2.1.0
  • WPCode – Insert Headers and Footers 2.1.1
  • WPCode – Insert Headers and Footers 2.1.2
  • WPCode – Insert Headers and Footers 2.1.3
  • WPCode – Insert Headers and Footers 2.1.3.1
  • WPCode – Insert Headers and Footers 2.1.4
  • WPCode – Insert Headers and Footers 2.1.4.1
  • WPCode – Insert Headers and Footers 2.1.5
  • WPCode – Insert Headers and Footers 2.1.6
  • WPCode – Insert Headers and Footers 2.1.7
  • WPCode – Insert Headers and Footers 2.1.8
  • WPCode – Insert Headers and Footers 2.1.9
  • WPCode – Insert Headers and Footers 2.1.10

XSS in the auto insert site wide

Security improvement to prevent XSS attacks by escaping the output.

This vulnerability affects the following application versions:

  • WPCode – Insert Headers and Footers 2.0.0
  • WPCode – Insert Headers and Footers 2.0.1
  • WPCode – Insert Headers and Footers 2.0.2
  • WPCode – Insert Headers and Footers 2.0.3
  • WPCode – Insert Headers and Footers 2.0.4
  • WPCode – Insert Headers and Footers 2.0.4.1
  • WPCode – Insert Headers and Footers 2.0.4.2
  • WPCode – Insert Headers and Footers 2.0.4.3
  • WPCode – Insert Headers and Footers 2.0.4.4
  • WPCode – Insert Headers and Footers 2.0.5
  • WPCode – Insert Headers and Footers 2.0.6
  • WPCode – Insert Headers and Footers 2.0.7
  • WPCode – Insert Headers and Footers 2.0.8
  • WPCode – Insert Headers and Footers 2.0.8.1
  • WPCode – Insert Headers and Footers 2.0.9
  • WPCode – Insert Headers and Footers 2.0.10
  • WPCode – Insert Headers and Footers 2.0.11
  • WPCode – Insert Headers and Footers 2.0.12
  • WPCode – Insert Headers and Footers 2.0.13
  • WPCode – Insert Headers and Footers 2.0.13.1
  • WPCode – Insert Headers and Footers 2.1.0
  • WPCode – Insert Headers and Footers 2.1.1
  • WPCode – Insert Headers and Footers 2.1.2
  • WPCode – Insert Headers and Footers 2.1.3
  • WPCode – Insert Headers and Footers 2.1.3.1
  • WPCode – Insert Headers and Footers 2.1.4
  • WPCode – Insert Headers and Footers 2.1.4.1
  • WPCode – Insert Headers and Footers 2.1.5
  • WPCode – Insert Headers and Footers 2.1.6
  • WPCode – Insert Headers and Footers 2.1.7
  • WPCode – Insert Headers and Footers 2.1.8
  • WPCode – Insert Headers and Footers 2.1.9
  • WPCode – Insert Headers and Footers 2.1.10
  • WPCode – Insert Headers and Footers 2.1.11
  • WPCode – Insert Headers and Footers 2.1.12