Unscored Scanner template CVE-2014-4561 EUVD-2014-4488GHSA-6g7m-qq4g-xf4p

The ultimate-weather plugin 1.0 for WordPress has XSS

Published Jan 10, 2020 · Updated Aug 6, 2024 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Ultimate Weather Plugin <= 1.0 - Cross-Site Scripting http/cves/2014/CVE-2014-4561.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

http://codevigilant.com/disclosure/wp-plugin-ultimate-weather-plugin-a3-cross-site-scripting-xss/