.. / CVE-2020-11930

• XSS
• Nuclei
• Web

Exploit for WordPress GTranslate <2.8.52 - Cross-Site Scripting (CVE-2020-11930)

Description:

WordPress GTranslate plugin before 2.8.52 contains an unauthenticated reflected cross-site scripting vulnerability via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option.

Nuclei Template

View the template here CVE-2020-11930.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-11930.yaml

References: