CVE-2024-4384

CVE-2024-4384 affects the WordPress plugin CSSable Countdown up to version 1.5, where certain settings are not sanitised/escaped, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (multisite contexts). Public sources corroborate the issue and root ...