CVE-2015-5535

MEDIUM 4.3CVE-2015-5535 · Published 13/08/2015 · updated 17/06/2026

In short

CVE-2015-5535 is a MEDIUM (CVSS 4.3) vulnerability affecting qtranslate (qtranslate project).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
qtranslate qtranslate_project	`≤ 2.5.39`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the qTranslate plugin 2.5.39 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the qtranslate page to wp-admin/options-general.php.

References

packetstormsecurity.com/files/132916/WordPress-qTranslate-2.5.39-Cross-Site-Scripting.html · Exploit
securityfocus.com/archive/1/536102/100/0/threaded
wpvulndb.com/vulnerabilities/8120
htbridge.com/advisory/HTB23265 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free