Skip Navigation

[Resolved] Unpatched vulnerability in string translation

Tagged: 

This topic contains 0 replies, has 1 voice.

Last updated by walkmew 1 year, 5 months ago.

Assisted by: Bigul.

Author Posts
July 25, 2023 at 11:15 am #14095819

walkmew

The context parameter on the String Translation admin page is passed directly into SQL queries without being properly sanitized, allowing SQL injection.