| Package | Affected versions | Patched versions |
|---|---|---|
| sitepress-multilingual-cms | ≥ 2.9.3, ≤ 3.2.6 |
The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free