TranslatePress – Translate Multilingual Sites With AI Translation (<= 3.3.8)

The TranslatePress WordPress plugin is vulnerable to Stored Cross-Site Scripting via insufficient sanitization of the comment parameter, allowing unauthenticated attackers to inject malicious scripts.