CVE-2020-11930

The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link

published April 20, 2020

CVSS
—
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04457 · 91.4th percentile
Published
2020-04-20T00:07Z
EPSS history
Timeline
  • 20 APR 00:07Z
    The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link
    cvelistv5