CVE-2022-0601 – Countdown & Clock < 2.2.9 - Reflected Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2022-0601

21 Feb 2022 — The Countdown, Coming Soon, Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. El plugin Countdown, Coming Soon, Maintenance de WordPress versiones anteriores a 2.2.9, no sanea y escapa del parámetro post antes de devolverlo en una página de administración, conllevando a un ataque de tipo Cross-Site Scripting Reflejado • https://plugins.trac.wordpress.org/changeset/2679245 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •