medium6.1
CVE-2021-24474
The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthen…
Impact
The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Awesome Weather Widget Project | Awesome Weather Widget | through 3.0.2 |