CVE-2023-54413 | OnGoSystems WPML Multilingual CMS Plugin up to 4.6.0 wp-login.php wp_lang cross site scripting

October 22, 2026 Yanac

A vulnerability labeled as problematic has been found in OnGoSystems WPML Multilingual CMS Plugin up to 4.6.0. Affected by this vulnerability is an unknown functionality of the file wp-login.php. Executing a manipulation of the argument wp_lang can lead to cross site scripting.

This vulnerability is registered as CVE-2023-54413. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More