The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.

Published Sep 25, 2019 · Updated Aug 6, 2024 · Assigned by mitre