CVE-2018-5366

The CVE-2018-5366 entry concerns the WPGlobus plugin for WordPress (version 1.9.6) and a stored XSS issue in the wpglobus_option[more_languages] parameter sent to wp-admin/options.php. Multiple connected sources confirm the vulnerability class as cross-site scripting, triggered by that parameter,...