CVE-2023-5163
Weather Atlas Widget <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The Weather Atlas Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shortcode-weather-atlas' shortcode in versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Timeline
- CVE published
- Record last updated
Affected versions
- weatheratlas Weather Atlas Widget
through 1.2.1
References 7
plugins.trac.wordpress.org
- browser/weather-atlas/tags/1.2.1/includes/class-weather-atlas.php#L838
- browser/weather-atlas/tags/1.2.1/includes/class-weather-atlas.php#L858
- browser/weather-atlas/tags/1.2.1/includes/class-weather-atlas.php#L844
- browser/weather-atlas/tags/1.2.1/includes/class-weather-atlas.php#L845
- browser/weather-atlas/tags/1.2.1/includes/class-weather-atlas.php#L860
- browser/weather-atlas/trunk/includes/class-weather-atlas.php?rev=3000811#L326