Description
Lack of output escaping leads to a XSS vector in the multilingual associations component.
Remediation
References
Related Vulnerabilities
WordPress Plugin Sharebar Cross-Site Scripting and SQL Injection Vulnerabilities (1.2.1)
Apache Tomcat Use of Incorrectly-Resolved Name or Reference Vulnerability (CVE-2021-24122)
MongoDb Improper Certificate Validation Vulnerability (CVE-2025-12893)
SugarCRM Improper Restriction of XML External Entity Reference Vulnerability (CVE-2014-3244)
Apache Tomcat URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-11784)