Cross site scripting

2023-11-1421:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

authorization

vulnerability

nvd

wordpress

woocommerce

security

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Timer plugin <= 1.8.2 versions.

CPENameOperatorVersion
countdown_and_countup\\,_woocommerce_sales_timerle1.8.2

CPE	Name	Operator	Version
	countdown_and_countup\\,_woocommerce_sales_timer	le	1.8.2

References

patchstack.com/database/vulnerability/countdown-wpdevart-extended/wordpress-countdown-and-countup-woocommerce-sales-timer-plugin-1-8-2-cross-site-scripting-xss-vulnerability?_s_id=cve