wpml_multilingual_cms vulnerabilities

CVEs whose affected-version data names the wpml_multilingual_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2023-54413Medium· 6.1

today

WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang

WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wp_lang parameter. Attackers can lur…

▾ SunlitOnTheGoSystems · WPML Multilingual CMSvia CVEORG