CVE-2021-34630

creationtimestamp| type| source ---|---|--- 2024-12-02 11:23:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-34630.yaml...

CVE-2021-34630

GTranslate < 2.8.65 (Pro and Enterprise) is vulnerable to Reflected XSS due to the gtranslate_request_uri_var function echoing $_SERVER['REQUEST_URI'] at the top of pages. The issue persists despite addslashes and URL encoding in modern browsers; it can be triggered in older browsers (IE9 or b...

CVE-2021-34630 Reflected XSS in GTranslate Pro and GTranslate Enterprise < 2.8.65

In the Pro and Enterprise versions of GTranslate 2.8.65, the gtranslaterequesturivar function runs at the top of all pages and echoes out the contents of $SERVER'REQUESTURI'. Although this uses addslashes, and most modern browsers automatically URLencode requests, this plugin is still vulnerable ...