CVE-2022-3837

The Uji Countdown WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Date published : 2022-12-05

https://wpscan.com/vulnerability/8554ca79-5a4b-49df-a75f-5faa4136bb8c