Read the docs

Awesome Weather Widget Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Awesome Weather Widget Project records in CISA KEV

No Awesome Weather Widget Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Awesome Weather Widget 2 records LOW

Records

2 records

TI-2023-04554 CVE-2023-4944 · GHSA-39fq-6jqh-4p29

Awesome Weather Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Awesome Weather Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'awesome-weather' shortcode in versions up to, and including, 3.0.2 due to insufficient input sanitization and output escap…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00486 Published 2023-09-14 No fix listed CWE-79
TI-2021-06762 CVE-2021-24474 · GHSA-wmqx-9h6r-8v2v

Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)

Priority LOW 28

The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00726 Published 2021-08-02 No fix listed CWE-79
Open these records in search →