CVE-2021-24709CWE-79

Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting

published October 11, 2021

CVSS
—
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00617 · 49.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-10-11T10:45Z
EPSS history
Timeline
  • 11 OCT 10:45Z
    Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting
    cvelistv5