CVE-2021-24671

The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

PT-2021-16182

Name of the Vulnerable Software and Affected Versions MX Time Zone Clocks WordPress plugin versions prior to 3.4.1 Description The issue allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks due to the lack of escaping of the time zone attribute in the...