cleantalk
Vulnerabilities and Security Researches

Translate WordPress with GTranslate, CVE-2020-11930

CVE, Research URL

CVE-2020-11930

Published on
Apr 20, 2020
Research Description
The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option.
Affected versions
max 2.8.52.
Status
vulnerable