WordPress Plugin Vulnerabilities

Backend Localization 1.6.1 - wp-login.php kau-boys_backend_localization_language Parameter XSS

Description

The Backend Localization WordPress plugin was affected by a wp-login.php kau-boys_backend_localization_language Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
kau-boys-backend-localization
Fixed in 2.0

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
10c156da-c614-4b06-8c79-e8eaa38f9a9b

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-01-22
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.16.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-06-26
Title
Team Showcase < 25.05.13 - Reflected Cross-Site Scripting
Published
2014-08-01
Title
HTML5 jQuery Audio Player 2.3 - playlist/add_playlist.php Multiple Parameter Stored XSS Weakness
Published
2024-12-11
Title
Simple Payment < 2.3.8 - Reflected Cross-Site Scripting
Published
2024-04-15
Title
GuCherry Blog <= 1.1.8 - Reflected Cross-Site Scripting