← Back

Coolclock

coolclock

Vendor: Status301 • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24670
1Status301
1Coolclock
Jun 17, 2026
Sep 27, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The CoolClock WordPress plugin before 4.3.5 does not escape some shortcode attributes, allowing users with a role as low as Contributor toperform Stored Cross-Site Scripting attacks