XSS Vulnerability in qTranslate Plugin for WordPress
CVE-2015-5535

Currently unrated

Key Information:

Vendor: Wordpress
Status: Qtranslate
Vendor: CVE Published:; 13 August 2015

What is CVE-2015-5535?

The qTranslate plugin for WordPress suffers from a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML into the application. This exploitation occurs through the 'edit' parameter in the qtranslate page located at wp-admin/options-general.php. Attackers can leverage this flaw to execute malicious scripts in the context of unsuspecting users' browsers, potentially leading to unauthorized actions and compromise of sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch