CVE-2022-29420 | THREATINT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Adam Skaat Countdown & Clock (WordPress plugin) countdown-builder allows Stored XSS.This issue affects Countdown & Clock (WordPress plugin): from n/a through 2.3.2.

Reserved 2022-04-18 | Published 2022-05-06 | Updated 2024-09-16 | Assigner Patchstack

MEDIUM: 5.9CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

Default status

unaffected

Any version

affected

Credits

Jeong Wonjun - Pongchi (Patchstack Alliance) finder

References

patchstack.com/...red-cross-site-scripting-xss-vulnerability vdb-entry

cve.org (CVE-2022-29420)

nvd.nist.gov (CVE-2022-29420)

Download JSON