Skip to content
OpenAdvisories

Product · OnTheGoSystems

WPML Multilingual CMS

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang

    WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wp_lang parameter. Attackers can lure users to /wp-login.p…