WordPress Plugin Vulnerabilities
Countdown & Clock < 2.3.3 - Reflected Cross-Site Scripting
Description
The plugin does not sanitise and escape the ycd_type parameter before outputting back in a page, leading to a Reflected Cross-Site Scripting
Affects Plugins
Fixed in 2.3.3 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Ex.Mi
Verified
No
WPVDB ID
Timeline
Publicly Published
2022-04-28 (about 4 years ago)
Added
2022-05-07 (about 4 years ago)
Last Updated
2022-07-27 (about 3 years ago)
WPScan 