CVE-2025-52749: WordPress Uji Countdown plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Q: Which installations are affected?

Uji Countdown versions through 2.3.3 are affected. The affected software is identified as the WordPress Uji Countdown plugin.

Q: What would an attacker need to exploit this issue?

The issue is network-accessible, requires no attacker privileges, and has low attack complexity. Exploitation requires user interaction, consistent with a reflected XSS attack.

Q: What impact could successful exploitation have?

The reported vector indicates low impacts to confidentiality, integrity, and availability, with scope changed. A successful attack could execute injected script in the context reached by the victim.

Published Oct 22, 2025

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Activity Track Uji Countdown uji-countdown allows Reflected XSS.This issue affects Uji Countdown: from n/a through <= 2.3.3.

Affected Software

2 affected components

Uji Countdown Uji Countdown<=2.3.3

WordPress Uji Countdown plugin<=2.3.3

Event History

Oct 22, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

Uji Countdown versions through 2.3.3 are affected. The affected software is identified as the WordPress Uji Countdown plugin.

What would an attacker need to exploit this issue?

The issue is network-accessible, requires no attacker privileges, and has low attack complexity. Exploitation requires user interaction, consistent with a reflected XSS attack.

What impact could successful exploitation have?

The reported vector indicates low impacts to confidentiality, integrity, and availability, with scope changed. A successful attack could execute injected script in the context reached by the victim.

CVE-2025-52749: WordPress Uji Countdown plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

Which installations are affected?

What would an attacker need to exploit this issue?

What impact could successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What would an attacker need to exploit this issue?

What impact could successful exploitation have?