CVE-2020-10455

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/translate.php by adding a question mark ? followed by the payload...

CVE-2019-17660: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in admin/translate/translateheaderview.php in LimeSurvey 3.19.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the tolang parameter, as demonstrated by the index.php/admin/translate/sa/index/surveyid/336819/lang/ PATHINFO...

WordPress my-wp-translate plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. my-wp-translate is a language translation plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress my-wp-translate plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. my-wp-translate is a language translation plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

CVE-2017-18569

The my-wp-translate plugin before 1.0.4 for WordPress has CSRF...

CVE-2017-18568

The my-wp-translate plugin before 1.0.4 for WordPress has XSS...

CVE-2017-18568

The my-wp-translate plugin before 1.0.4 for WordPress has XSS...

Cross site scripting

The my-wp-translate plugin before 1.0.4 for WordPress has XSS...

Cross site request forgery (csrf)

The my-wp-translate plugin before 1.0.4 for WordPress has CSRF...

CVE-2017-18568

The my-wp-translate plugin before 1.0.4 for WordPress has XSS...

CVE-2017-18568

CVE-2017-18568 affects the WordPress plugin my-wp-translate (before version 1.0.4). The vulnerability is cross-site scripting (XSS) caused by lack of proper validation of client-side data in the plugin. Impact ranges from partial integrity impact to potential user-observed content manipulation; C...

CVE-2017-18569

The CVE-2017-18569 entry concerns the WordPress plugin my-wp-translate (versions prior to 1.0.4). A CSRF vulnerability is present, arising from insufficient verification that requests originate from a trusted user. This could allow an attacker to perform unintended actions on behalf of an authent...

CVE-2017-18568: Improper Neutralization of Input During Web Page Generation

The my-wp-translate plugin before 1.0.4 for WordPress has XSS...

CVE-2017-18569: Cross-Site Request Forgery (CSRF)

The my-wp-translate plugin before 1.0.4 for WordPress has CSRF...

WordPress Loco Translate 2.2.1 Local File Inclusion

Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate/ Version: Version 2.2.1 Tested on: Debian GNU/Linux 9 Docker...

WordPress Loco Translate 2.2.1 Plugin - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate/ Version: Version 2.2.1 Tested on: Debian...

WordPress Plugin Loco Translate 2.2.1 - Local File Inclusion

WordPress Plugin Loco Translate 2.2.1 - Local File Inclusion Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate...

WordPress Plugin Loco Translate 2.2.1 - Local File Inclusion

Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate/ Version: Version 2.2.1 Tested on: Debian GNU/Linux 9 Docker...

Loco Translate < 2.2.2 - Authenticated LFI

WordPress plugin Loco Translate version appears to have an Authenticated LFI Vulnerability under the 'Edit Template' Functionality. The following vulnerability can be exploited by any user with access to the plugin access can range from Admin to Subscriber WPScanTeam Note: Was not able to reprodu...

gdal/gdal_vector_translate_fuzzer: Heap-use-after-free in VSIFCloseL

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5767757281361920 Project: gdal Fuzzer: aflgdalvectortranslatefuzzer Fuzz target binary: gdalvectortranslatefuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...