5 matches found
CVE-2014-4561
The ultimate-weather plugin 1.0 for WordPress has XSS...
6.1CVSS7AI score0.03826EPSS
SaveExploits2References1
CVE-2014-4561
The ultimate-weather plugin 1.0 for WordPress has XSS...
6.1CVSS6.1AI score0.03826EPSS
SaveExploits2References1
EUVD-2014-4488
The ultimate-weather plugin 1.0 for WordPress has XSS...
6.1CVSS6.1AI score0.03826EPSS
SaveExploits2References1
CVE-2014-4561
The ultimate-weather plugin 1.0 for WordPress has XSS...
6.1AI score0.03826EPSS
SaveExploits2References1
Ultimate Weather Plugin <= 1.0 - Unauthenticated Reflected XSS
The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-content/plugins/ultimate–weather–plugin/magpierss/scripts/magpiedebug.php?url=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...
4.3CVSS0.9AI score0.03826EPSS
SaveExploits2References1Affected Software1
20