Advisories · Technology
webilop User Language Switch.
Every CVE that names webilop User Language Switch among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.4 Medium
User Language Switch <= 1.6.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'tab_color_picker_language_switch' Parameter
- webilop User Language Switch
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
User Language Switch <= 1.6.10 - Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' Parameter
- webilop User Language Switch
- Server-side request forgery (SSRF)
- CVSS 7.1 High
WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability
- Webilop User Language Switch
- Cross-site scripting (XSS)