Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-29421

WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Description

Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type vulnerable parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adam Skaat Countdown & Clock (WordPress plugin)

  • <= 2.3.2 to ≤ 2.3.2affected

References