WordPress GTranslate <2.8.52 - Cross-Site Scripting
WordPress GTranslate plugin before 2.8.52 contains an unauthenticated reflected cross-site scripting vulnerability via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option.
CVSS6.1EPSS 10.8%