WordPress sitepress-multilingual-cms 3.6.3 - Cross-Site Scripting Detection

WordPress plugin sitepress-multilingual-cms 3.6.3 is vulnerable to cross-site scripting in processforms via any localefilename parameter such as localefilenameen in an authenticated theme-localization.php request to wp-admin/admin.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin...