WordPress: Stored XSS Vulnerability in Countdown Timer Plugin

In Countdown Timer plugin for WordPress versions 1.0 and prior a medium severity vulnerability CVE-2024-13864 was detected. This vulnerability allows attackers to inject arbitrary web scripts due to insufficient input sanitization and output escaping, leading to Stored Cross-Site Scripting (XSS). Currently, there is no fix version for this issue. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-13864.