The Countdown Timer for Elementor WordPress plugin before 1.3.7 does not sanitise and escape some parameters when outputting them on the page, which could allow users with a role as low as contributor to perform Cross-Si…
CVSS 3.1MEDIUM 5.9·Network·High privileges·User interaction·EPSS 0.00336·Published 2025-02-26·Fixed in 1.3.7CWE-79