CVE-2020-11930

6.1MEDIUM

Key Information:

Vendor
Wordpress
Status
Translate WordPress With Gtranslate
Vendor
CVE Published:
20 April 2020

Summary

The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option.

References

https://wordpress.org/plugins/gtranslate/#developers
x_refsource_MISC
https://plugins.trac.wordpress.org/changeset/2245581/gtra...
x_refsource_MISC
https://plugins.trac.wordpress.org/changeset/2245591/gtra...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.