CVE-2021-24683

CVE-2021-24683: Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting

Vendor Unknown
Product Weather Effect – Christmas Santa Snow Falling
Weakness CWE-352 · CSRF
Published October 11, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting issue.

Key dates

02Disclosure timeline

October 11, 2021 CVE published
August 3, 2024 Record updated