CVE Database /
CVE-2015-9416
CVE · Medium
CVE-2015-9416 — WPML [sitepress-multilingual-cms] >= 2.9.3 - <= 3.2.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2015-9416
|
WPML [sitepress-multilingual-cms] >= 2.9.3 - <= 3.2.6 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
2.9.3–3.2.7
|
3.2.7 |
2015-09-02 |
—
|
CVE-2015-9416
WPML versions 2.9.3 through 3.2.6 contained a cross-site scripting flaw that could be exploited through the Accept-Language HTTP header. An attacker could inject malicious scripts via this header, which the plugin failed to properly sanitize before output. This vulnerability allowed for unauthorized script execution in user browsers.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings