← Back to CVE List

CVE-2021-24683

Published: 2021-10-11T11:15Z
Last Modified: 2024-11-21T05:53Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting issue. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt