cleantalk
Vulnerabilities and Security Researches

Countdown, Coming Soon, Maintenance – Countdown & Clock, 73ec6727301fec392c5f3bd54fe7d92994cf0751

Published on
May 25, 2022
Research Description
Countdown, Coming Soon, Maintenance &#8211; Countdown &amp; Clock [countdown-builder] < 2.3.9.6 Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.9.5 - Authenticated Cross-Site Scripting The plugin Countdown, Coming Soon, Maintenance – Countdown & Clock for WordPress is vulnerable to Stored Cross-Site Scripting. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions
max 2.3.9.6.
Status
vulnerable