Ultimate Weather Plugin <= 1.0 - Cross-Site Scripting Detection

The ultimate-weather plugin 1.0 for WordPress contains a cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The ultimate-weather plugin 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

CVE-2014-4561

The ultimate-weather plugin 1.0 for WordPress has XSS...

CVE-2014-4561

The ultimate-weather plugin 1.0 for WordPress has XSS...

EUVD-2014-4488

The ultimate-weather plugin 1.0 for WordPress has XSS...

CVE-2014-4561

The ultimate-weather plugin 1.0 for WordPress has XSS...

CVE-2014-4561: Improper Neutralization of Input During Web Page Generation

The ultimate-weather plugin 1.0 for WordPress has XSS...

Ultimate Weather Plugin <= 1.0 - Unauthenticated Reflected XSS

The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-content/plugins/ultimate–weather–plugin/magpierss/scripts/magpiedebug.php?url=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...