This vulnerability in the Translate This gTranslate Shortcode plugin allows stored cross-site scripting due to improper input sanitization during web page generation. An attacker with low privileges can inject malicious scripts that may be executed in the context of other users, potentially leading to partial confidentiality, integrity, and availability impacts. The vulnerability affects all versions up to 1.0. No vendor advisory or patch links are provided, and the plugin is not a cloud service, so remediation depends on vendor updates or user action.

Successful exploitation can lead to execution of arbitrary scripts in the context of affected users, potentially resulting in partial loss of confidentiality, integrity, and availability of the affected web application. The attack requires user interaction and low privileges, limiting the ease of exploitation. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling or removing the affected plugin to mitigate risk. Monitor vendor channels for updates or official patches addressing this vulnerability.