Not rated
CVE-2021-24474 The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its…
Description
The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Awesome Weather Widget | 3.0.2 | No fix stated |