Cross-site Scripting (XSS)

Overview i18nextify is an enables localization of any page with zero effort Affected versions of this package are vulnerable to Cross-site Scripting XSS via replaceInside, used by the translateProps function in src/localize.js when untrusted translation values containing dangerous URL schemes suc...

CVE-2025-30607

CVE-2025-30607 is a reflected XSS in the WordPress plugin Quick Localization (aka Quick Localisation), affecting versions up to 0.1.0. Public details indicate improper input neutralization during web page generation leading to cross-site scripting, with CVSS 3.1 base score 7.1 (HIGH) and exploita...

CVE-2006-5898

Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ChatPath parameter...