CVE-2024-13735

creationtimestamp| type| source ---|---|--- 2025-02-14 09:29:30+00:00| seen| https://infosec.exchange/users/cve/statuses/114001534633593944 2025-02-14 10:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4xwlt7gz2s 2025-02-14 10:44:38+00:00| seen|...

CVE-2024-13735 HurryTimer <= 2.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name

The HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.11.2 due to insufficient input sanitization and output escaping of a campaign name. This makes it possible...

CVE-2024-13735 HurryTimer <= 2.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name

The HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.11.2 due to insufficient input sanitization and output escaping of a campaign name. This makes it possible...