CVE-2023-4502

CVE-2023-4502 concerns the Translate WordPress with GTranslate plugin (before 3.0.4). Multiple connected sources confirm a Stored XSS vulnerability caused by insufficient sanitisation/escaping of plugin settings, which can permit high-privilege users (e.g., admins) to inject script payloads even ...

CVE-2023-4502 Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS

The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisi...