Input validation vulnerability in jQuery T(-) Countdown Widget 2.3.25

The jQuery T(-) Countdown Widget plugin for WordPress has a security vulnerability that allows hackers to insert harmful code into pages of the website. This can happen when a user with certain access levels uses the plugin’s tminus shortcode. The vulnerability affects all versions up to 2.3.25 and is caused by not properly checking and filtering user input. This means that attackers who are logged in and have contributor-level access or higher can add their own code to a page, which will then run whenever someone visits that page.