CVE-2026-66433

WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions.

Vendor / product	Versions
ShapedPlugin LLC / Location Weather	affected n/a through 3.0.6

CWE-79

CISA-ADP

No English description supplied.

No references supplied.