Medium · 4.8 CVE-2018-5366 EUVD-2022-2114GHSA-35mh-f6p8-pj2c

WPGlobus plugin Stored XSS & CSRF security vulnerability

Published Jan 12, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[more_languages] parameter to wp-admin/options.php.

Ecosystem	Package	Affected	Fixed	Record
Packagist	wpglobus/wpglobus	< 1.9.7	1.9.7	GHSA-35mh-f6p8-pj2c