Awesome Weather Widget Project Awesome Weather Widget
2 CVEs affecting Awesome Weather Widget Project Awesome Weather Widget. Latest disclosed: 2023-09-14. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4944 | Medium | 6.4 | 2023-09-14 | The Awesome Weather Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'awesome-weather' shortcode in versions up to, and including… |
CVE-2021-24474 | Medium | 6.1 | 2021-08-02 | The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthen… |