PT-2020-7677 · WordPress · Ultimate-Weather

Prajalkulkarni · Published 2020-01-10 · Updated 2020-01-13 · CVE-2014-4561

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ultimate-weather plugin version 1.0

Description The issue affects the ultimate-weather plugin for WordPress, allowing for cross-site scripting (XSS) attacks.

Recommendations For version 1.0, update to a newer version that contains a fix for this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-4561

Affected Products

Ultimate-Weather

References · 2

• 🔥 http://codevigilant.com/disclosure/wp-plugin-ultimate-weather-plugin-a3-cross-site-scripting-xss · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4561 · Security Note