Cross site scripting

Reflected Cross-Site Scripting XSS vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycdtype vulnerable parameter...

CVE-2022-29421

Reflected Cross-Site Scripting XSS vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycdtype vulnerable parameter...

CVE-2022-29421 WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycdtype vulnerable parameter...

CVE-2022-29421

CVE-2022-29421 affects WordPress plugin Countdown & Clock (

CVE-2022-29420 WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...

CVE-2022-29420 WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...

CVE-2022-29420

CVE-2022-29420 affects WordPress plugin Countdown & Clock (countdown-builder) up to version 2.3.2, enabling stored XSS. Root cause described as improper input handling during web page generation. Some sources indicate authenticated/admin-level context may be required for exploitation; others do n...

CVE-2022-29423: Undefined Security Weakness

Pro Features Lock Bypass vulnerability in Countdown & Clock plugin = 2.3.2 at WordPress...

CVE-2022-29421: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycdtype vulnerable parameter...

PT-2022-19595

Name of the Vulnerable Software and Affected Versions Adam Skaat's Countdown & Clock plugin versions prior to 2.3.3 Description The issue concerns Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited via several vulnerable parameters,...

WordPress plugin Countdown & Clock 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. WordPress plugin Countdown & Clock version 2.3.2 and previous versions have a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting attacks...

PT-2022-19593

Name of the Vulnerable Software and Affected Versions Countdown & Clock WordPress plugin versions through 2.3.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. The...

PT-2022-19594

Name of the Vulnerable Software and Affected Versions Adam Skaat's Countdown & Clock plugin affected versions not specified Description A Reflected Cross-Site Scripting XSS issue exists in Adam Skaat's Countdown & Clock plugin on WordPress. The ycd type parameter is vulnerable, allowing for...

CVE-2022-29420: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. WordPress plugin Countdown & Clock 2.3.2 and previous versions have a cross-site scripting vulnerability, which can be exploited by attackers to perform cross-site scripting attacks...

CVE-2022-29422: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerabilities in Adam Skaat's Countdown & Clock plugin = 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margin-right, &ycd-button-margin-bottom,...

PT-2022-19596 · WordPress · Countdown & Clock

Name of the Vulnerable Software and Affected Versions: Countdown & Clock plugin versions prior to 2.3.3 Description: A Pro Features Lock Bypass issue affects the Countdown & Clock plugin at WordPress. The issue allows bypassing of pro features locks. Recommendations: For versions prior to 2.3.3,...

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

PT-2025-8361

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the commit b34ea31fe013 Description A vulnerability in the Linux kernel has been resolved. The issue was related to the iommu clock control in the mtk iommu remove function. After a specifi...