CVE-2021-24683 — Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting
The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored …
Published: 2021-10-11 · CVSS: Unscored
The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7