CVE-2021-24709 | BDVDB-2026-162298 Detail

Weather Effect – Christmas Santa Snow Falling

Description#

The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/df74ed76-af9e-47a8-9a4d-c5c57e9e0f91

Exploit#

No public exploit known

History#

Version 12021-10-11Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.