PT-2023-21137 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress Core versions up to, and including, 6.2 Description: The issue allows unauthenticated attackers to access and load arbitrary translation files via the wp lang parameter, potentially leading to a Cross-Site Scripting attack if a...

CVE-2019-1010207: Improper Neutralization of Input During Web Page Generation

Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting XSS. The impact is: Stealing of session cookies. The component is: File: Login. Parameters: interim-login, wp-lang, and supplied URL. The attack vector is: If a victim clicks a malicious link, the attacker can steal his/he...