Medium · 4.7 CVE-2022-29421 EUVD-2022-33759GHSA-8vxg-r3hj-c4gx

WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Published May 6, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type vulnerable parameter.

Vendor	Product	Affected	Fixed
Adam Skaat	Countdown & Clock (WordPress plugin)	<= 2.3.2 – ≤ 2.3.2	—