CVE Database /
CVE-2021-25103
CVE · Medium
CVE-2021-25103 — Translate WordPress with GTranslate [gtranslate] < 2.9.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-25103
|
Translate WordPress with GTranslate [gtranslate] < 2.9.7 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.7
|
< 2.9.7
|
2.9.7 |
2022-01-10 |
—
|
CVE-2021-25103
The GTranslate plugin for WordPress versions prior to 2.9.7 contains a reflected cross-site scripting vulnerability in the url_addon/gtranslate-email.php file where the body parameter is not properly sanitized or escaped before being reflected in the page output. Exploitation of this flaw requires an attacker to possess knowledge of both the NONCE_SALT and NONCE_KEY values.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings