Vendors / Weather Atlas Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Weather Atlas records in CISA KEV No Weather Atlas vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weather Atlas Weather Atlas Widget weather-atlas allows Reflected XSS.This issue affects Weather Atlas Widget: from n/…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00287 · Published 2024-11-20 · No fix listed CWE-79
Priority LOW 30
The Weather Atlas Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shortcode-weather-atlas' shortcode in versions up to, and including, 1.2.1 due to insufficient input sanitization and output…
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2023-11-22 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 1 0 0
