Security Advisory

CVE-2021-24594

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-11-08 17:34:45

Last updated 2024-08-03 19:35:20

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Translate WordPress – Google Language Translator WordPress plugin before 6.0.12 does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

← Browse all CVEs View on cve.org ↗