22 matches found
VulnCheck KEV: CVE-2023-54413
WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wplang parameter. Attackers can lure users to /wp-login.php with a wplang value injecting an ima...
6.1CVSS5.9AI score0.00211EPSS
SaveIn wildExploits0References2
20