CVE-2021-24910

CVE-2021-24910 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Transposh WordPress Translation plugin prior to version 1.0.8. The vulnerability arises from insufficient sanitization and escaping of the 'a' parameter in an AJAX action, allowing malicious script injection into the response. With a CVSS score of 6.1 (Medium), it can be exploited by unauthenticated users via a network-based attack requiring user interaction, potentially leading to information disclosure and limited integrity impact. While there is no evidence of active exploitation or Metasploit modules, Nuclei templates exist for detection, and there is minimal community discussion or media coverage.