CVE-2021-34630

🗓️ 30 Jul 2021 20:45:07Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 101 Views🌐 WEB

CVE-2021-34630 GTranslate < 2.8.65 Reflected XSS Vulnerabilit

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-34630	2 Dec 202411:23	–	circl
CNNVD	WordPress 插件代码注入漏洞	30 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-34630 Reflected XSS in GTranslate Pro and GTranslate Enterprise < 2.8.65	30 Jul 202120:45	–	cvelist
EUVD	EUVD-2021-21280	7 Oct 202500:30	–	euvd
Nuclei	GTranslate < 2.8.65 - Cross-Site Scripting	10 Jun 202605:11	–	nuclei
NVD	CVE-2021-34630	30 Jul 202121:15	–	nvd
Patchstack	WordPress GTranslate plugin <= 2.8.64 – Reflected Cross-Site Scripting (XSS) vulnerability	23 Jul 202100:00	–	patchstack
Prion	Cross site scripting	30 Jul 202121:15	–	prion
wpexploit	GTranslate < 2.8.65 - Reflected Cross-Site Scripting (XSS)	23 Jul 202100:00	–	wpexploit
WPVulnDB	GTranslate < 2.8.65 - Reflected Cross-Site Scripting (XSS)	23 Jul 202100:00	–	wpvulndb

NVD

Vulners

Node

gtranslate gtranslateRange<2.8.65enterprisewordpress

gtranslate gtranslateRange<2.8.65prowordpress

[
  {
    "product": "GTranslate Pro and GTranslate Enterprise",
    "vendor": "Translate AI Multilingual Solutions",
    "versions": [
      {
        "lessThan": "2.8.65",
        "status": "affected",
        "version": "2.8.65",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
plugins	www.plugins.svn.wordpress.org/gtranslate/tags/2.8.64/gtranslate.php

Parameter	Position	Path	Description	CWE
page	query param	/?page</script><script>alert(123);</script>	Reflected XSS via gtranslate_request_uri_var echoing $_SERVER['REQUEST_URI'] in GTranslate<2.8.65, with an example payload in the query string.	CWE-116, CWE-79

21 Nov 2024 06:10Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24.3

CVSS 3.15 - 6.1

EPSS0.02674