medium6.1
CVE-2015-9416
The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.
Impact
The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Onthegosystems | Sitepress-Multilingual-Cms | from 2.9.3 through 3.2.6 |