CVE-2024-4783

CVE-2024-4783 affects the jQuery T(-) Countdown Widget for WordPress. It is vulnerable to Stored Cross-Site Scripting via the tminus shortcode in all versions up to 2.3.25 due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at contributor level o...