CVE-2022-29421: Edmonsoft Countdown Builder

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type vulnerable parameter.

Affected products

• Edmonsoft Countdown Builder: up to and including 2.3.2

Published 2022-05-06. Last modified 2026-06-17.