3 matches found
CVE-2024-13340
CVE-2024-13340 : MDTF – Meta Data and Taxonomies Filter (WordPress) is affected by a stored cross-site scripting vulnerability via the shortcode mdf_results_by_ajax in all versions up to and including 1.3.3.6. The issue arises from insufficient input sanitization and output escaping on user-suppl...
PT-2025-2122 · WordPress · Mdtf
Name of the Vulnerable Software and Affected Versions: MDTF – Meta Data and Taxonomies Filter plugin for WordPress versions up to, and including, 1.3.3.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'mdf results by ajax' shortcode due to insufficient input...
WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin MDTF versions = 1.3.3.6...