WordPress Plugin WPML Version < 4.6.1 Cross-Site Scripting
WordPress Plugin WPML Version < 4.6.1 is vulnerable to RXSS via wp_lang parameter.
wpmlPoC 已收录
CVSS—
共找到 2 条公开漏洞记录
WordPress Plugin WPML Version < 4.6.1 is vulnerable to RXSS via wp_lang parameter.
WordPress plugin sitepress-multilingual-cms 3.6.3 is vulnerable to cross-site scripting in process_forms via any locale_file_name_ parameter (such as locale_file_name_en) in an authenticated theme-localization.php request to wp-admin/admin.php.