CVE-2016-10870

CVE-2016-10870 affects the WordPress google-language-translator plugin, with XSS in versions prior to 5.0.06. Root cause: insufficient validation of client-side data in the plugin. Impact: cross-site scripting via the plugin’s interfaces. Mitigation: upgrade to version 5.0.06 or later (as indicat...