Vulnerabilities > Xlplugins > Finale > 1.0.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-03-12 | CVE-2024-12589 | Cross-site Scripting vulnerability in Xlplugins Finale The Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the countdown timer in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. | 5.4 |
| 2024-06-09 | CVE-2024-30485 | Unspecified vulnerability in Xlplugins Finale Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0. | 8.8 |