Aller au contenu
Se connecter
6.8 Moyenne

CVE-2026-83545 The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside…

Description

The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inline script, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes when the content is viewed.

Produits et versions touchés

Produit Versions touchées Corrigé en
CoolClock 4.3 premières → < 4.3.8 4.3.8

Autres CVE de CoolClock

Les 2 CVE de CoolClock →
CVE-2026-83546 The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an… 6.8 Moyenne
Suivre cette CVE