Skip to content
Sign in
7.1 High

CVE-2026-103062 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.6.

Affected products and versions

Product Affected versions Fixed in
TranslatePress 3.3 earliest → 3.3.6 No fix stated

Other CVEs of TranslatePress

The 5 CVEs of TranslatePress →
CVE-2026-78267 Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions 9.8 Critical CVE-2026-66582 Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions 7.1 High CVE-2025-58592 Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object… 8.1 High CVE-2025-30773 Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object… 7.2 High
Track this CVE