CVE-2024-13113

The Countdown Timer for Elementor WordPress plugin, in versions prior to 1.3.7 , is vulnerable to Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization and escaping of certain parameters when they are outputted on the page. This flaw allows users with a role as low as contr...