CVE-2022-29420

🗓️ 06 May 2022 16:53:30Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 67 Views

Authenticated Stored XSS in Adam Skaat's Countdown & Clock plugi

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-29420	28 Apr 202210:50	–	attackerkb
Circl	CVE-2022-29420	6 May 202220:22	–	circl
CNNVD	WordPress plugin Countdown & Clock 跨站脚本漏洞	6 May 202200:00	–	cnnvd
CNVD	WordPress plugin Countdown	9 May 202200:00	–	cnvd
Cvelist	CVE-2022-29420 WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability	6 May 202216:53	–	cvelist
EUVD	EUVD-2022-33758	3 Oct 202520:07	–	euvd
NVD	CVE-2022-29420	6 May 202217:15	–	nvd
OSV	CVE-2022-29420	6 May 202217:15	–	osv
Patchstack	WordPress Countdown & Clock plugin <= 2.4.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	28 Apr 202200:00	–	patchstack
Prion	Cross site scripting	6 May 202217:15	–	prion

NVD

Vulners

Node

edmonsoft countdown_builderRange≤2.3.2wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "countdown-builder",
    "product": "Countdown & Clock (WordPress plugin)",
    "vendor": "Adam Skaat",
    "versions": [
      {
        "lessThanOrEqual": "2.3.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/countdown-builder/wordpress-countdown-clock-plugin-2-3-1-authenticated-stored-cross-site-scripting-xss-vulnerability