Weather Effect Security Vulnerabilities and Issues — Weather Effect CVE List

Lucene search

AwplifeWeather Effect

2 matches found

CVE•added 2021/10/11 11:15 a.m.•49 views

CVE-2021-24709

The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues

4.8CVSS4.8AI score0.00282EPSS

CVE•added 2021/10/11 11:15 a.m.•35 views

CVE-2021-24683

The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting issue.

5.4CVSS5.3AI score0.00108EPSS