TI-2024-36475 CVE-2024-54389 · GHSA-hpr8-g3rf-4f89
WordPress addWeather plugin <= 2.5.1 - CSRF to Stored XSS vulnerability
Priority LOW 31
Cross-Site Request Forgery (CSRF) vulnerability in Eduardo addWeather myweather allows Cross Site Request Forgery.This issue affects addWeather: from n/a through <= 2.5.1.