PT-2023-21137 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress Core versions up to, and including, 6.2 Description: The issue allows unauthenticated attackers to access and load arbitrary translation files via the wp lang parameter, potentially leading to a Cross-Site Scripting attack if a...