Medium 6.5 Unfixed
2025-09-22≤ 2.21.3
xili-language <= 2.21.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Minimum safe version
2.21.3
Update to 2.21.3 or later to address 3 fixable vulnerabilities
xili-language <= 2.21.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-31085
xili-language - index.php lang Parameter XSS
WordPress xili-language Plugin <= 2.8.5 - Cross Site Scripting