CVE-2026-66433

The vulnerability affects the Location Weather application versions 3.0.6 and earlier, allowing for Contributor Cross Site Scripting (XSS) attacks. This could enable an attacker to inject malicious scripts into web pages viewed by users, potentially leading to data theft or session hijacking. Organizations using this application should prioritize patching to mitigate the risk of exploitation.