title: Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)
description: The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Awesome Weather Widget
vendor: Unknown
versions:
lessThanOrEqual: 3.0.2, status: affected, version: 3.0.2, versionType: custom
}