CVE-2022-29420

creationtimestamp| type| source ---|---|--- 2022-05-06 20:22:56+00:00| seen| https://t.me/cibsecurity/42119 2025-03-14 02:31:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkckxzhzpj2m...

CVE-2022-29420

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...

CVE-2022-29420 WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...

CVE-2022-29420

CVE-2022-29420 affects WordPress plugin Countdown & Clock (countdown-builder) up to version 2.3.2, enabling stored XSS. Root cause described as improper input handling during web page generation. Some sources indicate authenticated/admin-level context may be required for exploitation; others do n...