857 matches found
CVE-2023-4944
The Awesome Weather Widget for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'awesome-weather' shortcode in versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2023-4944
CVE-2023-4944 affects the WordPress plugin Awesome Weather Widget (WordPress plugin). The Red Hat and Wordfence records confirm a Stored Cross-Site Scripting (XSS) vulnerability via the shortcodes: specifically, the awesome-weather shortcode can be exploited due to insufficient input sanitization...
WordPress Awesome Weather Widget Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Awesome Weather Widget Type Plugin Vulnerable versions = 3.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4944 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID caba79ed19c3 Credits Lana Codes Required...
WordPress Plugin Awesome Weather Widget Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-4944: Improper Neutralization of Input During Web Page Generation
The Awesome Weather Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'awesome-weather' shortcode in versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
PT-2023-31227 · WordPress · Awesome Weather Widget
Name of the Vulnerable Software and Affected Versions: The Awesome Weather Widget for WordPress plugin versions up to, and including, 3.0.2 Description: The issue is related to Stored Cross-Site Scripting via the 'awesome-weather' shortcode due to insufficient input sanitization and output escapi...
CVE-2023-30715
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...
CVE-2023-30715
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...
Improper access control
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...
CVE-2023-30715
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...
CVE-2023-30715
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...
CVE-2023-30715
CVE-2023-30715 is an improper access control vulnerability in Weather prior to Samsung SMR Sep-2023 Release 1, enabling local attackers to access location information stored in Weather without permission. Affected scope centers on Weather components in Samsung Mobile devices; root cause is inadeq...
CVE-2023-30715: Undefined Security Weakness
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability previously existed in SAMSUNG Mobile devices SMR Sep-2023 Release 1 version, which stemmed from an improper access control vulnerability in Weather...
pakistan-weather.com Cross Site Scripting vulnerability OBB-3650385
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-22916 · Weather · Weather
Name of the Vulnerable Software and Affected Versions: Weather versions prior to SMR Sep-2023 Release 1 Description: The issue allows attackers to access location information set in Weather without permission due to an improper access control vulnerability. Recommendations: For versions prior to...
CMSJerusalem Weather Forecast 1.3 Directory Traversal
==================================================================================================================================== | Title : CMSJerusalem Weather Forecast v1.3 Directory Traversal Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...
WordPress TK Event Weather Plugin <= 1.6.6 is vulnerable to Cross Site Scripting (XSS)
Software TK Event Weather Type Plugin Vulnerable versions = 1.6.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e823c2c9f8bf Credits Rafie Muhammad Patchstack Require...