This vulnerability involves improper input sanitization in the RealMag777 MDTF plugin for WordPress, specifically in versions up to 1.3.3.4. It allows for cross-site scripting attacks by injecting malicious scripts during web page generation. The attack vector is network-based with low attack complexity, requiring low privileges and user interaction. The vulnerability impacts confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector. No vendor advisory or patch information is provided, and the plugin is not a cloud service.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to limited disclosure of information, modification of data, or disruption of service. The impact is rated medium based on the CVSS score of 6.5, reflecting partial compromise of confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting plugin usage to trusted users and limit exposure to untrusted input. Monitor vendor channels for updates and apply patches promptly once released.