Polylang, CVE-2014-4855
- CVE, Research URL
- Home page URL
- Application
- Published on
- Jul 10, 2014
- Research Description
- Cross-site scripting (XSS) vulnerability in the Polylang plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a user description. NOTE: some of these details are obtained from third party information.
- Affected versions
-
Min -, max 2.5.1.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Theme and plugin translation for Polylang (TTfP) (CVE-2022-4169) , Jun 07, 2024 |
| Polylang (CVE-2014-4855) , Jun 06, 2024 |
| Polylang , Jan 16, 2025 |