2 matches found
CVE-2024-13113
The Countdown Timer for Elementor WordPress plugin before 1.3.7 does not sanitise and escape some parameters when outputting them on the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...
5.9CVSS6.1AI score0.00324EPSS
SaveExploits1References1
CVE-2024-13113 Countdown Timer for Elementor < 1.3.7 - Contributor+ Stored XSS
The Countdown Timer for Elementor WordPress plugin before 1.3.7 does not sanitise and escape some parameters when outputting them on the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...
0.00324EPSS
SaveExploits1References1
20