CVE Database /
CVE-2024-32556
CVE · Medium
CVE-2024-32556 — HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce [hurrytimer] < 2.10.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-32556
|
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce [hurrytimer] < 2.10.0 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.5
|
< 2.10.0
|
2.10.0 |
2024-04-16 |
—
|
CVE-2024-32556
The HurryTimer plugin for WordPress is affected by a stored cross-site scripting vulnerability in versions up to 2.9.2, caused by improper sanitization of user-supplied attributes and inadequate output escaping. Attackers with contributor-level permissions or higher can inject malicious scripts into pages, which execute when those pages are viewed by other users. The vulnerability was patched in version 2.10.0.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings