Lucene search

K
osvGoogleOSV:GHSA-GPQ5-VQVX-CH9J
HistoryMay 14, 2022 - 3:49 a.m.

WPGlobus plugin Stored XSS & CSRF security vulnerability

2022-05-1403:49:04
Google
osv.dev
3
wpglobus
plugin
xss
csrf
security vulnerability
wordpress
wp-admin/options.php

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.0%

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[enabled_languages][en] or wpglobus_option[enabled_languages][fr] (or any other language) parameter to wp-admin/options.php.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.0%

Related for OSV:GHSA-GPQ5-VQVX-CH9J