Issue #3331205 by larowlan, sanderwind: SSTI possible via translation of "Language" in CKEditor Language plugin
mentioned in commit d7c15b6d