CVE-2021-24474: Awesome Weather Widget Project Awesome Weather Widget

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability.

Affected products

• Awesome Weather Widget Project Awesome Weather Widget: up to and including 3.0.2

Published 2021-08-02. Last modified 2026-06-17.