WordPress Google Language Translator Plugin < 6.0.12 XSS Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2021-24594

The Translate WordPress – Google Language Translator WordPress plugin before 6.0.12 does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24594

CVE-2021-24594 affects the Translate WordPress – Google Language Translator plugin for WordPress up to version 6.0.12. The root cause is insufficient sanitization/escaping of certain plugin settings before output, allowing stored Cross-Site Scripting by high-privilege users even when unfiltered_h...

Translate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Put the following payload in the Floating Widget Settings Custom tex...

Translate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. Put the following payload in the Floating Widget Settings Custom text fo...

Google Language Translator < 6.0.10 - Authenticated Cross-Site Scripting (XSS)

The plugin was vulnerable to Authenticated Cross-Site Scripting XSS only affecting older web browsers such as Internet Explorer = 9...

Google Language Translator < 6.0.10 - Authenticated (author+) Cross-Site Scripting (XSS)

The plugin was vulnerable to Authenticated Cross-Site Scripting XSS allowing a user with Author role to execute malicious JavaScript via the glt shortcode...

WordPress google-language-translator plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. google-language-translator is a language translation plugin used in it. A cross-site scripting vulnerability exists in WordPress...

CVE-2016-10870

The google-language-translator plugin before 5.0.06 for WordPress has XSS...

CVE-2016-10870

The google-language-translator plugin before 5.0.06 for WordPress has XSS...

Cross site scripting

The google-language-translator plugin before 5.0.06 for WordPress has XSS...

CVE-2016-10870

The google-language-translator plugin before 5.0.06 for WordPress has XSS...

Google Language Translator <= 5.0.05 - XSS

The Translate WordPress – Google Language Translator WordPress plugin was affected by a XSS security vulnerability...

WordPress Google Language Translator Plugin <= 4.0.9 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "googlelanguagetranslatorflagsorder". Solution Upgrade this plugin...

Google Language Translator <= 4.0.9 - Authenticated Cross-Site Scripting (XSS)

The Translate WordPress – Google Language Translator WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...