CVE-2015-10092

MEDIUM 6.1CVE-2015-10092 · Published 06/03/2023 · updated 17/06/2026

In short

CVE-2015-10092 is a MEDIUM (CVSS 6.1) vulnerability affecting qtranslate slug (qtranslate slug project).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.7% of all vulnerabilities.
Fix: update to 1.1.17 or later.

Package	Affected versions	Patched versions
qtranslate slug qtranslate_slug_project	`< 1.1.17`	`1.1.17`

Description

A vulnerability was found in Qtranslate Slug Plugin up to 1.1.16 on WordPress. It has been classified as problematic. Affected is the function add_slug_meta_box of the file includes/class-qtranslate-slug.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.1.17 is able to address this issue. The name of the patch is 74b3932696f9868e14563e51b7d0bb68c53bf5e4. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-222324.

References

wp-plugins/qtranslate-slug commit 74b3932 · Patch
wp-plugins/qtranslate-slug release 1.1.17 · Release Notes
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

More vulnerabilities in qtranslate slug

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free