Lucene search
+L

940 matches found

Positive Technologies
Positive Technologies
•added 2022/05/06 12:00 a.m.•1 views

PT-2022-19593

Name of the Vulnerable Software and Affected Versions Countdown & Clock WordPress plugin versions through 2.3.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. The...

5.9CVSS0.00436EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/05/06 12:00 a.m.•16 views

WordPress plugin Countdown & Clock 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS8.3AI score0.01076EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/05/06 12:00 a.m.•13 views

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. WordPress plugin Countdown & Clock version 2.3.2 and previous versions have a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting attacks...

5.9CVSS5.1AI score0.00436EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/05/06 12:00 a.m.•15 views

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. WordPress plugin Countdown & Clock 2.3.2 and previous versions have a cross-site scripting vulnerability, which can be exploited by attackers to perform cross-site scripting attacks...

6.1CVSS5.9AI score0.00757EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/05/06 12:00 a.m.•20 views

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

4.8CVSS4.9AI score0.00565EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/05/06 12:00 a.m.•8 views

PT-2022-19595

Name of the Vulnerable Software and Affected Versions Adam Skaat's Countdown & Clock plugin versions prior to 2.3.3 Description The issue concerns Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited via several vulnerable parameters,...

4.8CVSS0.00565EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/06 12:00 a.m.•8 views

CVE-2022-29422: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerabilities in Adam Skaat's Countdown & Clock plugin = 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margin-right, &ycd-button-margin-bottom,...

4.8CVSS5.6AI score0.00565EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/06 12:00 a.m.•4 views

CVE-2022-29420: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...

5.9CVSS5.6AI score0.00436EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/06 12:00 a.m.•2 views

PT-2022-19594

Name of the Vulnerable Software and Affected Versions Adam Skaat's Countdown & Clock plugin affected versions not specified Description A Reflected Cross-Site Scripting XSS issue exists in Adam Skaat's Countdown & Clock plugin on WordPress. The ycd type parameter is vulnerable, allowing for...

6.1CVSS0.00757EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2022/04/28 12:59 p.m.•10 views

CVE-2022-29423

Pro Features Lock Bypass vulnerability in Countdown & Clock plugin = 2.3.2 at WordPress...

9.8CVSS8.6AI score0.01076EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2022/04/28 11:45 a.m.•18 views

CVE-2022-29422

Multiple Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerabilities in Adam Skaat's Countdown & Clock plugin = 2.3.2 at WordPress via &ycd-countdown-width;, &ycd-progress-height;, &ycd-progress-width;, &ycd-button-margin-top;, &ycd-button-margin-right;, &ycd-button-margin-bottom;,...

4.8CVSS5.1AI score0.00565EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2022/04/28 11:30 a.m.•8 views

CVE-2022-29421

Reflected Cross-Site Scripting XSS vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycdtype vulnerable parameter...

6.1CVSS6.1AI score0.00757EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2022/04/28 10:50 a.m.•6 views

CVE-2022-29420

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...

5.9CVSS5.9AI score0.00436EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/04/28 12:00 a.m.•36 views

WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ex.Mi Patchstack in WordPress Countdown & Clock plugin versions = 2.3.2. Solution Update the WordPress Countdown & Clock plugin to the latest available version at least 2.3.3...

6.1CVSS3AI score0.00757EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/04/28 12:00 a.m.•34 views

WordPress Countdown & Clock plugin <= 2.4.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jeong Wonjun aka Pongchi Patchstack Alliance in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

5.9CVSS3.6AI score0.00436EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/04/28 12:00 a.m.•34 views

WordPress Countdown & Clock plugin <= 2.4.7 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities discovered by Ex.Mi in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

4.8CVSS3.2AI score0.00565EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/04/28 12:00 a.m.•49 views

WordPress Countdown & Clock plugin <= 2.4.7 - Pro Features Lock Bypass vulnerability

Pro Features Lock Bypass vulnerability discovered by Ex.Mi Patchstack in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

9.8CVSS3.5AI score0.01076EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/04/06 12:00 a.m.•17 views

WordPress The Events Calendar Countdown Addon plugin <= 1.3.1 - Arbitrary Plugin Activation vulnerability

Arbitrary Plugin Activation vulnerability discovered by Jerome Bruandet NinTechNet in WordPress The Events Calendar Countdown Addon plugin versions = 1.3.1. Solution Update the WordPress The Events Calendar Countdown Addon plugin to the latest available version at least 1.4...

3.9AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/04/06 12:00 a.m.•17 views

WordPress The Events Calendar Countdown Addon plugin <= 1.3.1 - Arbitrary Plugin Installation vulnerability

Arbitrary Plugin Installation vulnerability discovered by Jerome Bruandet NinTechNet in WordPress The Events Calendar Countdown Addon plugin versions = 1.3.1. Solution Update the WordPress The Events Calendar Countdown Addon plugin to the latest available version at least 1.4...

3.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/03/28 6:15 p.m.•19 views

CVE-2021-25064

The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection...

7.2CVSS7.1AI score0.01327EPSS
SaveExploits2References1
Rows per page
Query Builder