VYPR

Mx Time Zone Clocks

by Mx Time Zone Clocks Project

CVEs (1)

  • CVE-2021-24671MedSep 27, 2021
    risk 0.35cvss 5.4epss 0.01

    The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the time_zone attribute of the mxmtzc_time_zone_clocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks