CVE-2024-10631

The Countdown Timer for WordPress Block Editor WordPress plugin (versions through 1.0.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to validate and escape certain block options before they are outputted in a page or post where the block is embedded. This a...