Local Weather <= 1.0 - Reflected Cross-Site Scripting
mediumThe ultimate-weather plugin 1.0 for WordPress has XSS via the url parameter.
- CVSS:
- 6.1
- Affected:
- up to 1.0
- Fix:
- No patched version reported
- Disclosed:
- May 25, 2014
plugin
1 known security issue reported for the Ultimate Weather Plugin WordPress plugin. Most recent disclosed May 25, 2014.
Running Ultimate Weather Plugin on your site? Check whether your installed version is affected.
Scan your site freeThe ultimate-weather plugin 1.0 for WordPress has XSS via the url parameter.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free