{"vulnerability": "cve-2021-24910", "sightings": [{"uuid": "f61b7557-0ca0-44f0-afc2-9d7253ffc9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24910", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24910.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "8c69a23d-95d6-4ced-a0d3-520c5796b3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24910", "type": "seen", "source": "https://t.me/hacking_Attack/63490", "content": "Exploit Collector\nTransposh WordPress Translation 1.0.7 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-3PgjWVftdQ0/WWlvP-R2mXI/AAAAAAAAIM8/iBQyafDa-iYc-AHcRZlLffBv9_pWsP_-gCLcBGAs/s1600/h30.png \nTransposh WordPress Translation versions 1.0.7 and below have an ajax action \"tp_tp\" that is vulnerable to an unauthenticated/authenticated reflected cross site scripting vulnerability when user-supplied input to the HTTP GET parameter \"q\" is processed by the web application. Since the application does not properly validate and sanitize this parameter, it is possible to place arbitrary script code onto the same page.\n\nSHA-256 | 126f6f0908b2d0af3788074669b78c52b992a1d268ad9fca40e951bf16e63e90\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Transposh WordPress Translation\nVendor URL:     https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/\nType:           Cross-Site Scripting [CWE-79]\nDate found:     2021-08-19\nDate published: 2022-07-22\nCVSSv3 Score:   4.7 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)\nCVE:            CVE-2021-24910\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nTransposh WordPress Translation 1.0.7 and below\n4. INTRODUCTION\n===============\nTransposh translation filter for WordPress offers a unique approach to blog\ntranslation. It allows your blog to combine automatic translation with human\ntranslation aided by your users with an easy to use in-context interface.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe plugin's ajax action \"tp_tp\" is vulnerable to an unauthenticated/authenticated\nreflected Cross-Site Scripting vulnerability when user-supplied input to the HTTP\nGET parameter \"q\" is processed by the web application. Since the application does\nnot properly validate and sanitize this parameter, it is possible to place\narbitrary script code onto the same page.\n\nThis offers a wide range of possible attacks such as redirecting the user to a\nmalicious page, spoofing content on the page or attacking the browser and its\nplugins. Since all session-relevant cookies are protected by HTTPOnly, it is not\npossible to hijack sessions.\n6. PROOF OF CONCEPT\n===================\nThe following PoC triggers a JavaScript alert:\n\nhttp://[host]/wp-admin/admin-ajax.php?action=tp_tp&e=g&m=s&tl=en&q=<img%20src%3dx%20onerror%3dalert(document.cookie)\n7. SOLUTION\n===========\nUpdate to Transposh 1.0.8.1\n8. REPORT TIMELINE\n==================\n2021-08-19: Discovery of the vulnerability\n2021-08-20: Contacted the vendor via their contact form\n2021-08-20: Vendor response\n2021-08-20: Sent all the PoC exploits\n2021-08-20: Vendor acknowledges the issues\n2021-09-14: Requested status update from vendor\n2021-10-07: No response from vendor, requested status update again\n2021-10-25: CVE requested from WPScan (CNA)\n2021-10-27: WPScan assigns CVE-2021-24910\n2022-02-22: Vendor releases 1.0.8 which fixes this vulnerability\n2022-07-22: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\nhttps://transposh.org/version-1-0-8-thanks-julien/\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:33.009034Z"}, {"uuid": "d353d87f-97b8-4895-915b-c5673eb6b157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24910", "type": "seen", "source": "https://t.me/hacking_Attack/63490", "content": "Exploit Collector\nTransposh WordPress Translation 1.0.7 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-3PgjWVftdQ0/WWlvP-R2mXI/AAAAAAAAIM8/iBQyafDa-iYc-AHcRZlLffBv9_pWsP_-gCLcBGAs/s1600/h30.png \nTransposh WordPress Translation versions 1.0.7 and below have an ajax action \"tp_tp\" that is vulnerable to an unauthenticated/authenticated reflected cross site scripting vulnerability when user-supplied input to the HTTP GET parameter \"q\" is processed by the web application. Since the application does not properly validate and sanitize this parameter, it is possible to place arbitrary script code onto the same page.\n\nSHA-256 | 126f6f0908b2d0af3788074669b78c52b992a1d268ad9fca40e951bf16e63e90\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Transposh WordPress Translation\nVendor URL:     https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/\nType:           Cross-Site Scripting [CWE-79]\nDate found:     2021-08-19\nDate published: 2022-07-22\nCVSSv3 Score:   4.7 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)\nCVE:            CVE-2021-24910\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nTransposh WordPress Translation 1.0.7 and below\n4. INTRODUCTION\n===============\nTransposh translation filter for WordPress offers a unique approach to blog\ntranslation. It allows your blog to combine automatic translation with human\ntranslation aided by your users with an easy to use in-context interface.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe plugin's ajax action \"tp_tp\" is vulnerable to an unauthenticated/authenticated\nreflected Cross-Site Scripting vulnerability when user-supplied input to the HTTP\nGET parameter \"q\" is processed by the web application. Since the application does\nnot properly validate and sanitize this parameter, it is possible to place\narbitrary script code onto the same page.\n\nThis offers a wide range of possible attacks such as redirecting the user to a\nmalicious page, spoofing content on the page or attacking the browser and its\nplugins. Since all session-relevant cookies are protected by HTTPOnly, it is not\npossible to hijack sessions.\n6. PROOF OF CONCEPT\n===================\nThe following PoC triggers a JavaScript alert:\n\nhttp://[host]/wp-admin/admin-ajax.php?action=tp_tp&e=g&m=s&tl=en&q=<img%20src%3dx%20onerror%3dalert(document.cookie)\n7. SOLUTION\n===========\nUpdate to Transposh 1.0.8.1\n8. REPORT TIMELINE\n==================\n2021-08-19: Discovery of the vulnerability\n2021-08-20: Contacted the vendor via their contact form\n2021-08-20: Vendor response\n2021-08-20: Sent all the PoC exploits\n2021-08-20: Vendor acknowledges the issues\n2021-09-14: Requested status update from vendor\n2021-10-07: No response from vendor, requested status update again\n2021-10-25: CVE requested from WPScan (CNA)\n2021-10-27: WPScan assigns CVE-2021-24910\n2022-02-22: Vendor releases 1.0.8 which fixes this vulnerability\n2022-07-22: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\nhttps://transposh.org/version-1-0-8-thanks-julien/\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:43.341714Z"}]}