Lucene search
PRIOn knowledge basePRION:CVE-2023-28664HistoryMar 22, 2023 - 9:15 p.m.
Cross site scripting
2023-03-2221:15:00
PRIOn knowledge base
www.prio-n.com
4
wordpress
plugin
cross-site scripting
vulnerability
authenticated user
0.001 Low
EPSS
Percentile
23.3%
The Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a reflected cross-site scripting vulnerability in the ‘tax_name’ parameter of the mdf_get_tax_options_in_widget action, which can only be triggered by an authenticated user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress_meta_data_and_taxonomies_filter | le | 1.3.1 |
Related
wpexploit
wpexploit
MDTF < 1.3.1 - Reflected XSS
2023-03-22 00:00:00
cvelist
cvelist
CVE-2023-28664
2023-03-22 00:00:00
wpvulndb
wpvulndb
MDTF < 1.3.1 - Reflected XSS
2023-03-22 00:00:00
nvd
nvd
CVE-2023-28664
2023-03-22 21:15:19
cve
cve
CVE-2023-28664
2023-03-22 21:15:19
openvas
openvas
WordPress Meta Data and Taxonomies Filter Plugin < 1.3.1 XSS Vulnerability
2023-08-29 00:00:00
wordfence
wordfence