Vulnerabilities > Qtranslate X Project

DATE CVE VULNERABILITY TITLE RISK
2019-09-26 CVE-2015-9431 Cross-Site Request Forgery (CSRF) vulnerability in Qtranslate X Project Qtranslate X
The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_config_files or json_custom_i18n_config parameter.
network
low complexity
qtranslate-x-project CWE-352
6.5