CVE-2022-47179

CVE-2022-47179 is a CSRF vulnerability in the WordPress OWM Weather Plugin (versions

CVE-2022-47179 WordPress OWM Weather Plugin <= 5.6.11 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Uwe Jacobs OWM Weather plugin = 5.6.11 leads to post duplication as a draft...

CVE-2022-47179

Cross-Site Request Forgery CSRF vulnerability in Uwe Jacobs OWM Weather plugin = 5.6.11 leads to post duplication as a draft...

PT-2023-15221 · Uwe Jacobs · Owm Weather Plugin

Name of the Vulnerable Software and Affected Versions: Uwe Jacobs OWM Weather plugin versions 5.6.11 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to post duplication as a draft. Recommendations: For versions 5.6.11 and earlier,...

CVE-2022-47179: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Uwe Jacobs OWM Weather plugin = 5.6.11 leads to post duplication as a draft...

WordPress plugin OWM Weather 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2023-0360

The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0360

The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

Cross site scripting

The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0360

CVE-2023-0360 concerns the Location Weather WordPress plugin, prior to version 1.3.4. The issue is that certain block options are not properly validated or escaped before being output on a page or post, which can enable Stored XSS for users with the Contributor role or higher. The vulnerability i...

CVE-2023-0360 Location Weather < 1.3.4 - Contributor+ Stored XSS

The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0360 Location Weather < 1.3.4 - Contributor+ Stored XSS

The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

PT-2023-16211 · WordPress · Location Weather

Name of the Vulnerable Software and Affected Versions: Location Weather WordPress plugin versions prior to 1.3.4 Description: The issue concerns the Location Weather WordPress plugin, which does not properly validate and escape certain block options before outputting them in a page or post. This...

CVE-2023-0360: Undefined Security Weakness

The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress plugin Location Weather 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress OWM Weather Plugin <= 5.6.11 is vulnerable to Cross Site Request Forgery (CSRF)

Software OWM Weather Type Plugin Vulnerable versions = 5.6.11 Fixed in 5.6.12 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47179 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d309db39a0b0 Credits Cat Required privileg...

OWM Weather < 5.6.12 - Post Duplication via CSRF

The plugin does not have CSRF check when duplicating posts which will be duplicated as drafts, which could allow attackers to make logged in admin perform such action via a CSRF attack and fill up the post table...

bahrainweather.gov.bh Open Redirect vulnerability OBB-3173182

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Location Weather Plugin < 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Location Weather Type Plugin Vulnerable versions 1.3.4 Fixed in 1.3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0360 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 1547b60d4821 Credits Lana Codes Required...

Location Weather < 1.3.4 - Contributor+ Stored XSS

The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Exploit Additional CSS classes for "Location Weather"...