6.5
Moyenne
CVE-2025-26938 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Countdown…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Countdown Timer countdown-time allows Stored XSS.This issue affects Countdown Timer: from n/a through <= 1.2.6.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Countdown Timer 1.2 | premières → 1.2.6 | Pas de correctif indiqué |