TI-2015-07808 CVE-2015-9431 · GHSA-4hwf-mp4r-pw44The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the…Priority LOW 30The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_config_files or json_custom_i18n_config parameter.CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00867 · Published 2019-09-26 · No fix listed CWE-352