CVE-2022-45847

CVE-2022-45847 affects the WordPress Countdown Widget plugin for WordPress. The vulnerability is described as a Cross-Site Request Forgery (CSRF) that leads to Cross-Site Scripting (XSS) and impacts versions from (n/a) through 3.1.9.1. The root cause is CSRF that allows an attacker to induce XSS ...