Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24709

Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Weather Effect – Christmas Santa Snow Falling

  • 1.3.6 to < 1.3.6affected

References