CVE-2023-54413

The WPML Multilingual CMS plugin for WordPress (versions before 4.6.1 ) is vulnerable to a reflected cross-site scripting (XSS) flaw. The vulnerability exists due to insufficient input validation in the wp_lang parameter, which allows unauthenticated attackers to inject malicious scripts. Attacke...