← CVE Intelligence

CVE-2021-24709

Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues

Affected (CNA)

Vendor / productVersions
Unknown / Weather Effect – Christmas Santa Snow Fallingaffected 1.3.6 before 1.3.6

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.