CVE-2024-35755

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in El tiempo Weather Widget Pro allows Stored XSS.This issue affects Weather Widget Pro: from n/a through 1.1.40...

CVE-2024-35755 WordPress Weather Widget Pro plugin <= 1.1.40 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in El tiempo Weather Widget Pro allows Stored XSS.This issue affects Weather Widget Pro: from n/a through 1.1.40...

CVE-2024-35755 WordPress Weather Widget Pro plugin <= 1.1.40 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in El tiempo Weather Widget Pro allows Stored XSS.This issue affects Weather Widget Pro: from n/a through 1.1.40...

CVE-2024-35755

CVE-2024-35755 is an authenticated stored XSS in Weather Widget Pro for WordPress. Affected: Weather Widget Pro, versions up to 1.1.40. Root cause: Improper input neutralization during web page generation. Impact: Stored payloads could execute in pages viewed by users. Public patch status not det...

WordPress Weather Widget Pro Plugin <= 1.1.40 is vulnerable to Cross Site Scripting (XSS)

Software Weather Widget Pro Type Plugin Vulnerable versions = 1.1.40 Fixed in 1.1.41 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35755 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5b92161cd34b Credits LVT-tholv2k Required privilege...