CVE Database /
CVE-2022-29421
CVE · Medium
CVE-2022-29421 — Countdown, Coming Soon, Maintenance – Countdown & Clock [countdown-builder] < 2.3.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-29421
|
Countdown, Coming Soon, Maintenance – Countdown & Clock [countdown-builder] < 2.3.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.7
|
< 2.3.3
|
2.3.3 |
2022-04-28 |
—
|
CVE-2022-29421
The Countdown & Clock plugin through version 2.3.2 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts into web pages viewed by users. This flaw was identified in the plugin's handling of user input, which fails to properly sanitize or escape data before displaying it. The vulnerability affects all installations running version 2.3.2 or earlier and is resolved in version 2.3.3 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings