Lucene search
Rutuja D ShirkeWPVDB-ID:C0DD3EF1-579D-43A4-801A-660C41495D58HistoryJan 18, 2022 - 12:00 a.m.
Translation Exchange <= 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)
2022-01-1800:00:00
Rutuja D Shirke
wpscan.com
9
0.001 Low
EPSS
Percentile
25.0%
The plugin was vulnerable to Authenticated Stored Cross-Site Scripting (XSS) within the Project Key text field found in the plugin’s settings.
PoC
1. Click on Use on translation exchange connector 2. In Basic Settings,insert following payload in Project Key text field. "> 3. Click Save Changes
| CPE | Name | Operator | Version |
|---|---|---|---|
| translation-exchange | eq | * |
Related
cnvd
cnvd
WordPress插件Translation Exchange跨站脚本漏洞
2022-02-23 00:00:00
patchstack
patchstack
wpexploit
wpexploit
nvd
nvd
CVE-2021-25057
2022-02-21 11:15:08
cve
cve
CVE-2021-25057
2022-02-21 11:15:08
prion
prion
Cross site scripting
2022-02-21 11:15:00
cvelist
cvelist