Lucene search
WpvulndbWPVDB-ID:E18E69F7-3D28-4160-AB8E-C5064D894DA0HistoryApr 28, 2022 - 12:00 a.m.
Countdown & Clock <= 2.3.2 - Admin+ Stored Cross-Site Scripting
2022-04-2800:00:00
wpscan.com
12
plugin
sanitise
escape
settings
high privilege users
admin
stored cross-site scripting attacks
unfiltered_html capability
EPSS
0.001
Percentile
22.9%
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
Related
nvd
nvd
CVE-2022-29422
2022-05-06 18:15:10
CVE-2022-29420
2022-05-06 17:15:09
patchstack
patchstack
cvelist
cvelist
prion
prion
Cross site scripting
2022-05-06 18:15:00
Cross site scripting
2022-05-06 17:15:00
cve
cve
CVE-2022-29422
2022-05-06 18:15:10
CVE-2022-29420
2022-05-06 17:15:09
cnvd
cnvd
WordPress plugin Countdown
2022-05-09 00:00:00
vulnrichment
vulnrichment