PT-2021-16224

Name of the Vulnerable Software and Affected Versions Loco Translate WordPress plugin versions prior to 2.5.4 Description The issue concerns the mishandling of data inputs that get saved to a file, which can be renamed to have a .php extension. This allows authenticated "translator" users to inje...