The Translate This gTranslate Shortcode plugin suffers from a stored cross-site scripting vulnerability due to improper input neutralization during web page generation. This allows an attacker with at least low privileges and requiring user interaction to inject malicious scripts that can compromise confidentiality, integrity, and availability to a limited extent. The vulnerability affects all versions up to 1.0. There is no available patch or vendor advisory at this time, and no known active exploitation has been reported.

Successful exploitation can lead to stored XSS attacks, potentially allowing attackers to execute arbitrary scripts in the context of affected users. This can result in limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector. However, exploitation requires user interaction and some privileges, reducing the overall risk. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin versions. Avoid using versions up to 1.0 of Translate This gTranslate Shortcode. Monitor vendor channels for updates and apply patches promptly once available.