CVE-2021-34630

CVE-2021-34630 describes a reflected Cross-Site Scripting (XSS) vulnerability in GTranslate versions prior to 2.8.65 (Pro and Enterprise). This flaw arises from improper sanitization of the $_SERVER['REQUEST_URI'] variable, allowing an attacker to inject malicious scripts. Rated 6.1 MEDIUM, exploitation requires user interaction and is more likely in older browsers or under specific network manipulation scenarios, leading to potential information disclosure or defacement. There is no evidence of active exploitation, nor are there publicly available Metasploit or ExploitDB modules, though Nuclei templates exist. Community discussion and media coverage for this CVE are minimal.