Description
The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_config_files or json_custom_i18n_config parameter.
Unscored
CVE-2015-9431
EUVD-2015-9271GHSA-4hwf-mp4r-pw44
The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_…
Published Sep 26, 2019 · Updated Aug 6, 2024 · Assigned by mitre