mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-25 16:47:53 +02:00
884 B
884 B
CVE-2021-24709
Description
The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues
POC
Reference
- https://wpscan.com/vulnerability/df74ed76-af9e-47a8-9a4d-c5c57e9e0f91
- https://wpscan.com/vulnerability/df74ed76-af9e-47a8-9a4d-c5c57e9e0f91
Github
No PoCs found on GitHub currently.