40 matches found
PT-2024-11049 · WordPress · Google Language Translator
Name of the Vulnerable Software and Affected Versions: Google Language Translator plugin for WordPress versions up to, and including, 6.0.9 Description: The issue is related to Reflected Cross-Site Scripting via multiple parameters due to insufficient input sanitization and output escaping. This...
WordPress Google Language Translator Plugin <= 6.0.19 is vulnerable to Broken Access Control
Software Google Language Translator Type Plugin Vulnerable versions = 6.0.19 Fixed in 6.0.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-50375 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID e04370b04a40 Credits Abdi Prana...
WordPress Google Language Translator Plugin < 6.0.12 XSS Vulnerability
The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
CVE-2021-24594
The Translate WordPress – Google Language Translator WordPress plugin before 6.0.12 does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2021-24594
CVE-2021-24594 affects the Translate WordPress – Google Language Translator plugin for WordPress up to version 6.0.12. The root cause is insufficient sanitization/escaping of certain plugin settings before output, allowing stored Cross-Site Scripting by high-privilege users even when unfiltered_h...
CVE-2021-24594: Improper Neutralization of Input During Web Page Generation
The Translate WordPress – Google Language Translator WordPress plugin before 6.0.12 does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
Translate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Put the following payload in the Floating Widget Settings Custom tex...
Translate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. Put the following payload in the Floating Widget Settings Custom text fo...
Google Language Translator < 6.0.10 - Authenticated Cross-Site Scripting (XSS)
The plugin was vulnerable to Authenticated Cross-Site Scripting XSS only affecting older web browsers such as Internet Explorer = 9...
Google Language Translator < 6.0.10 - Authenticated (author+) Cross-Site Scripting (XSS)
The plugin was vulnerable to Authenticated Cross-Site Scripting XSS allowing a user with Author role to execute malicious JavaScript via the glt shortcode...
WordPress google-language-translator plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. google-language-translator is a language translation plugin used in it. A cross-site scripting vulnerability exists in WordPress...
CVE-2016-10870
The google-language-translator plugin before 5.0.06 for WordPress has XSS...
CVE-2016-10870
The google-language-translator plugin before 5.0.06 for WordPress has XSS...
Cross site scripting
The google-language-translator plugin before 5.0.06 for WordPress has XSS...
CVE-2016-10870
The google-language-translator plugin before 5.0.06 for WordPress has XSS...
CVE-2016-10870: Improper Neutralization of Input During Web Page Generation
The google-language-translator plugin before 5.0.06 for WordPress has XSS...
PT-2019-7666
Name of the Vulnerable Software and Affected Versions google-language-translator plugin versions prior to 5.0.06 Description The issue allows for XSS. Recommendations For versions prior to 5.0.06, update to version 5.0.06 or later to resolve the issue...
Google Language Translator <= 5.0.05 - XSS
The Translate WordPress – Google Language Translator WordPress plugin was affected by a XSS security vulnerability...
Google Language Translator <= 4.0.9 - Authenticated Cross-Site Scripting (XSS)
The Translate WordPress – Google Language Translator WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
WordPress Google Language Translator Plugin <= 4.0.9 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "googlelanguagetranslatorflagsorder". Solution Upgrade this plugin...