In the Pro and Enterprise versions of GTranslate < 2.8.65, the gtranslate_request_uri_var function runs at the top of all pages and echoes out the contents of $_SERVER['REQUEST_URI'].
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.01565·Published 2021-07-30·Fixed in 2.8.65CWE-116