Skip to content
OpenAdvisories

Vendor

Hans Matzen

2 known vulnerabilities.

Products

wp-forecast (WordPress plugin) 1 wp-forecast 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-30429

    WordPress wp-forecast plugin <= 9.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hans Matzen allows Stored XSS.This issue affects wp-forecast: from n/a through 9.2.

    Hans Matzen wp-forecast
  • Medium 4.8
    CVE-2022-35725

    WordPress wp-forecast plugin <= 7.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen's wp-forecast plugin <= 7.5 at WordPress.

    Hans Matzen wp-forecast (WordPress plugin) Web / CMS