Skip Navigation

Home › Support › English Support › [Resolved] The WPML plugin is vulnerable to Cross-Site Scripting (XSS) via the wp_lang quer

[Resolved] The WPML plugin is vulnerable to Cross-Site Scripting (XSS) via the wp_lang quer

This is the technical support forum for WPML - the multilingual WordPress plugin.

Everyone can read, but only WPML clients can post here. WPML team is replying on the forum 6 days per week, 22 hours per day.

Tagged: 

This topic contains 2 replies, has 2 voices.

Last updated by Sumit 1 year, 1 month ago.

Assisted by: Sumit.

Author Posts
March 14, 2023 at 11:38 pm #13246907

michaelV-60

[description removed]
March 15, 2023 at 7:00 am #13248427

Sumit
Supporter

Languages: English (English )

Timezone: Asia/Kolkata (GMT+05:30)

Hi,

Thank you for reporting this.

We are checking this and update you very soon.

Thanks
March 16, 2023 at 4:10 pm #13262255

Sumit
Supporter

Languages: English (English )

Timezone: Asia/Kolkata (GMT+05:30)

Hi,

Thank you for your patience.

The problem has been fixed in WPML 4.6.1 and it is available to download. Please update to the latest version.

Again thank you very much for the report.
This ticket is now closed. If you're a WPML client and need related help, please open a new support ticket.