The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_config_files or json_custom_i18n_config parameter.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-09-26T01:06:12

Updated: 2024-08-06T08:51:05.284Z

Reserved: 2019-09-25T00:00:00

Link: CVE-2015-9431

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-09-26T02:15:10.193

Modified: 2024-11-21T02:40:37.223

Link: CVE-2015-9431

cve-icon Redhat

No data.