Countdown Timer for Elementor, CVE-2024-13113

CVE, Research URL: CVE-2024-13113
Home page URL: Security reports for Countdown Timer for Elementor
Application: Countdown Timer for Elementor
Published on: Feb 26, 2025
Research Description: The Countdown Timer for Elementor WordPress plugin before 1.3.7 does not sanitise and escape some parameters when outputting them on the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.
Affected versions: max 1.3.7.
Status: vulnerable