Now officially on WordPress.org

CVE Database / CVE-2022-29420

CVE · Medium

CVE-2022-29420 — Countdown, Coming Soon, Maintenance – Countdown & Clock [countdown-builder] < 2.3.3

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-29420, CVE-2022-29422 Countdown, Coming Soon, Maintenance – Countdown & Clock [countdown-builder] < 2.3.3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 5.9 < 2.3.3 2.3.3 2022-04-28 —

CVE-2022-29420, CVE-2022-29422

The Countdown & Clock plugin for WordPress contains a stored cross-site scripting vulnerability caused by improper handling of user input during web page generation. An attacker can inject malicious scripts that are permanently stored and executed when pages are viewed. The vulnerability exists in all versions up to and including 2.3.2, with the issue being resolved in version 2.3.3.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings