This vulnerability in RealMag777 MDTF (wp-meta-data-filter-and-taxonomy-filter) plugin versions up to 1.3.5 arises from improper neutralization of input during web page generation, enabling DOM-based cross-site scripting (XSS). The CVSS 3.1 score is 6.5 (medium), reflecting network attack vector, low complexity, required privileges, user interaction, and impacts on confidentiality, integrity, and availability. No known exploits in the wild or vendor patches have been reported as of the publication date.

Successful exploitation can lead to execution of malicious scripts in the context of the affected web application, potentially allowing an attacker to steal sensitive information, manipulate content, or disrupt availability. The impact affects confidentiality, integrity, and availability but requires some user interaction and privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting user input or applying web application firewall (WAF) rules to mitigate DOM-based XSS risks specific to this plugin. Monitor vendor channels for updates.