CVE-2015-2314 | WPML up to 3.1.7 Comment comments/feed lang sql injection (ID 130810 / EDB-36414)
A vulnerability was found in WPML up to 3.1.7. It has been declared as critical. This vulnerability affects unknown code of the file comments/feed of the component Comment. The manipulation of the argument lang leads to sql injection.
This vulnerability was named CVE-2015-2314. The attack can be initiated remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.