To plugin page

Not fixed

WordPress Countdown & Clock plugin <= 2.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

4.8

CVSS 3.1 score Medium severity

Monitoring Coming soon

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

Countdown & Clock

Type

Plugin

Vulnerable versions

<= 2.3.2

Fixed in

N/A

PSID

ed616db6668b

CVE ID

CVE-2022-29420

Classification

Cross Site Scripting (XSS)

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Required privilege

Requires high role user authentication like admin.

Credits

Jeong Wonjun aka Pongchi (Patchstack Alliance)

Publicly disclosed

2022-04-28

Details

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Jeong Wonjun aka Pongchi (Patchstack Alliance) in WordPress Countdown & Clock plugin (versions <= 2.3.2).

Solution

No patched version is available.

References

CVE-2022-29420 Plugin changelog

WordPress Countdown & Clock plugin <= 2.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Details

Solution

References

Other known vulnerabilities for Countdown & Clock

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

WordPress Countdown & Clock plugin <= 2.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Details

Solution

References

Other known vulnerabilities for Countdown & Clock

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

Let us know if we have missed a vulnerability reported elsewhere

Thank you for contributing!