CVE-2015-10092

The CVE concerns the Qtranslate Slug Plugin for WordPress (up to version 1.1.16). The vulnerability affects the add_slug_meta_box function in includes/class-qtranslate-slug.php and can be triggered remotely to perform cross-site scripting. A fix is available in version 1.1.17, with patch 74b39326...