Lucene search

K
wpvulndbWpvulndbWPVDB-ID:BEDCBEE3-0A4F-4F01-936B-B0758870AD40
HistoryApr 28, 2022 - 12:00 a.m.

Countdown & Clock < 2.3.3 - Reflected Cross-Site Scripting

2022-04-2800:00:00
wpscan.com
12
plugin
reflected cross-site scripting
xss
security flaw
page output

EPSS

0.001

Percentile

26.2%

The plugin does not sanitise and escape the ycd_type parameter before outputting back in a page, leading to a Reflected Cross-Site Scripting

EPSS

0.001

Percentile

26.2%

Related for WPVDB-ID:BEDCBEE3-0A4F-4F01-936B-B0758870AD40