CVE-2020-11930

MEDIUM NUCLEI

Translate Wordpress With Gtranslate < 2.8.52 - XSS

Title source: rule

Description

The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option.

Nuclei Templates (1)

WordPress GTranslate <2.8.52 - Cross-Site Scripting
MEDIUMby dhiyaneshDK
Shodan: http.html:/wp-content/plugins/gtranslate
FOFA: body=/wp-content/plugins/gtranslate

References (4)

Scores

CVSS v3 6.1
EPSS 0.0445
EPSS Percentile 89.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
gtranslate/translate_wordpress_with_gtranslate < 2.8.52
Published Apr 20, 2020
Tracked Since Feb 18, 2026