Problem: The client reported that the DOMPurify version bundled with WPML is outdated, specifically version 3.2.4, which is vulnerable according to several security advisories. The client requested an update to a current release (≥ 3.4.12) for both the main WPML product and the OTGS Installer. Solution: We confirmed that the issue has been addressed and the fix will be included in the next WPML release, version 5.0. Updating to WPML 5.0 once it is available will resolve the issue.
Please note that this solution might be irrelevant if it's outdated or not applicable to your case. We highly recommend checking related known issues at https://wpml.org/known-issues/, verifying the version of the permanent fix, and confirming that you have installed the latest versions of themes and plugins. If the issue persists, please open a new support ticket at WPML support forum.
