TranslatePress – Translate Multilingual Sites With AI Translation (<= 3.3.7)

The TranslatePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment parameter, allowing unauthenticated attackers to execute arbitrary web scripts.